Thomas Buchberger wrote: > With PAP it works - but not with CHAP. That's the problem ... > I think the CHAP module handles wrong passwords and auth-type different > than the rlm_pap module.
No. It doesn't. > Config looks like this: > > DEFAULT Auth-Type := Accept This completely bypasses any password checks. > ERX-Virtual-Router-Name = "vpn:XXX", > ERX-Egress-Policy-Name = "XXX", > ERX-Local-Loopback-Interface = "loopback 255", > Service-Type = Framed-User, > Framed-Protocol = PPP, > Fall-Through = Yes > > Test100 Password = "Test100" Use: Test100 Cleartext-Password := "Test100" That's been documented since at least 1.1.4. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
