Hi, > when i removed "Auth-Type := PAP" line radius not checking > password , even when wrong password is used user get the > authenticated. you then have a hardcoded Accept somewhere in your config alan