It’s possible to have an LWAPP AP Authorize againt the WLC or Radius server.
At the AP Policies enable Authorize APs againts AAA and add a MAC.
Make sure that this MAC address is from the AP Ethernet MAC Address and NOT the radio.
With the command : debug lwapp event enable
you can see if the AP can register.
If you see : Returning AAA Error ‘No Server’ (-7) for mobile you can enable
debug aaa all enable to see what’s wrong.
In this case there was no MAC of the AP at the Authorization list.
If you clear the AP Authorization list, the WLC will search at the Radius server for the MAC of the AP.
The username and password should be the Ethernet MAC address of the AP. Without the “:”