<html><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-15"><META name="Author" content="Novell GroupWise WebAccess"></head><body style='font-family: Tahoma, sans-serif; font-size: 13px; '>I have allow_retry = yes in /etc/raddb/modules/mschap <br>and <br>send_error = yes in the mschapv2 section of /etc/raddb/eap.conf<br><br>I am not seeing any change in behavior from the mac, it doesn't even prompt for a new username/password so I must be missing something else<br><br><br>Jonathan<br>>>> alan buxey <A.L.M.Buxey@lboro.ac.uk> 07/30/12 5:14 PM >>><br>Hi,<br><br>> Allow EAP-MSCHAPv2 to send error message to client. This change allows<br>> some clients to prompt the user for a new password. See raddb/eap.conf,<br>> mschapv2 section, "send_error".<br><br>you need to enable the function in the mschap module AND in the eap.conf<br><br><br>I'm not sure whether there was another little bugette in that code that slipped<br>by which recently got fixed in the 3.0 pre-release?<br><br>alan<br>-<br>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br><br></body></html>