thanks for the help until now! I have another problem on freeradius, related to PEAP. The MSCHAP module needs a couple user-pw to perform authentication... and in the radiusd log I can read that is not possible to retrieve a NT-password or NL-password. But I don't want to use such thing (I read is related to Samba). I would like to submit user and password to my LDAP server, and this one have to check the right relationship! But I know EAP doesn't allow plain text PW, as LDAP needs! Now: is it possible to tell MSCHAP to use LDAP or passwd file to authenticate the user? And, before this, is it possible to obtain the PW from the EAP challenge in order to submit it further? Please give me a little advice... it seems it should be a problem soooo simple to solve! I already lost 10 days .. to help: I'm working with such a system. - Standard Windows XP client, PEAP-MSCHAPv2 - Aegis supplicant, with all types of EAP - Access Point Cisco Aironet 1200, set to use WPA-TKIP and EAP authentication -Freeradius server, working on GENTOO linux 2005 thank you very much, for everything you could suggest! __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com