mikoi wrote: > The problem: > When logging in with the user with Cleartext-Password all passwords are > accepted.
Because that's what you told it to do. > mysql> select * from radgroupcheck; > +----+-----------+----------------+----+-------------+ > | id | groupname | attribute | op | value | > +----+-----------+----------------+----+-------------+ > | 8 | VPN-AUTH | Huntgroup-Name | == | VPN-Service | > | 9 | VPN-AUTH | Auth-Type | := | Accept | Why is the Auth-Type := Accept in there? > users-file > # On no match, the user is denied access. > DEFAULT Auth-Type := Reject This is ALWAYS the default. There is no need for this line. Delete it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html