Re: mschap

On 2/7/25 6:32 PM, Alan DeKok wrote:

b) you didn't put "mschap" into the "authenticate" section

I missed that; one step closer at least

One issue here is that you're not starting with the default configuration, and then gradually making it do what you want.

I'm starting with an ancient version that has been working for years, and trying to map it into a vastly different configuration where both of them are confusing. I did have mschap commented out because I didn't think the clients were using it though, and didn't get it fully re-enabled when I realized that was wrong.