hey all we keep upgrading FR servers and i got stuck with problem where I need PAP (I think) well i need clear text password and its not working for my user. When i send request through NTRAdping w/ CHAP all works well but when I'm using device as NAS nothing works :( I hope some one can point me out in right direction. Here is my output: ============================================================================ rad_recv: Access-Request packet from host XXX.XXX.XXX.11 port 64094, id=152, length=136 NAS-IP-Address = 192.168.0.112 NAS-Identifier = "XXX.XXXXXXX.com" User-Name = "alex" User-Password = "mypass" Service-Type = Login-User NAS-Port-Type = Ethernet NAS-Port = 0 Framed-IP-Address = 192.168.2.254 Called-Station-Id = "00:0d:b9:XX:XX:XX" Calling-Station-Id = "00:0e:35:XX:XX:XX" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "alex", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> alex attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 152 to XXX.XXX.XXX.11 port 64094 Waking up in 4.9 seconds. Cleaning up request 1 ID 152 with timestamp +827 Ready to process requests.