27 Mar
2008
27 Mar
'08
1:45 a.m.
James McOrmond wrote:
Yes. But don't set Auth-Type. Please.
you seem to have a real issue with it :-)
Because almost everyone gets it wrong, and then argues about it...
I specifically want the test-pap account to fail if the authentication method used is anything but pap. I don't see that restriction here.
PAP authentication means that there is a User-Password attribute in the request. The sample config I posted checks that, and if there's *no* User-Password, rejects the user. Alan DeKok.