Did you pick the operators by chance? You are not very lucky, as only one (for the password) is correct. Even that is not correct if this is the latest version of the server (1.1.6) - you should use Cleartext-Password and := as an operator.
radgroupcheck: >+----+-----------+------------------+-------+----+ >| id | GroupName | Attribute | Value | op | >+----+-----------+------------------+-------+----+ >| 1 | dialup | Auth-Type | Local | == | >| 2 | dialup | Simultaneous-Use | 1 | == | >+----+-----------+------------------+-------+----+ - delete Auth-Type; you don't need it for a recent server version - change op for Simultaneous-Use to := radgroupreply: >+----+-----------+--------------------+---------------------+----+ >| id | GroupName | Attribute | Value | op | >+----+-----------+--------------------+---------------------+----+ >| 27 | dialup | Framed-IP-Address | 255.255.255.254 | == | >| 28 | dialup | Framed-Compression | Van-Jacobson-TCP-IP | == | >| 29 | dialup | Framed-IP-Netmask | 255.255.255.255 | == | >| 30 | dialup | Framed-MTU | 576 | == | >| 31 | dialup | Idle-Timeout | 900 | := | >+----+-----------+--------------------+---------------------+----+ - change all ops to = - is this (255.255.255.254) really the IP address you want to give your user; client is unlikely to accept IP address above 224 subnet users file: > users: Matched DEFAULT at 173 > rad_check_password: Found Auth-Type System There is a DEFAULT entry towards the end of users file setting Auth-Type System. Comment it out. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html