Hello, Any idea why 3.0.9 would reject an ldap user with the above error, while 3.0.8 would successfully authenticate them? The two servers have the same config files. I looked at the debug output and could not see a difference.. just an error: for the same user, hence same password hash fetched from same LDAP server: 3.0.9 Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Expiring EAP session with state 0x776c1e12716407f0 Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Finished EAP session with state 0xb5c7569eb4cb5280 Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Previous EAP request found for state 0xb5c7569eb4cb5280, released from the list Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Peer sent packet with method EAP MD5 (4) Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Calling submodule eap_md5 to process data Sat Jul 25 12:47:51 2015 : Debug: (1088) eap_md5: Cleartext-Password is required for EAP-MD5 authentication Sat Jul 25 12:47:51 2015 : ERROR: (1088) eap: Failed continuing EAP MD5 (4) session. EAP sub-module failed Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Sending EAP Failure (code 4) ID 12 length 4 Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Failed in EAP select Sat Jul 25 12:47:51 2015 : Debug: (1088) modsingle[authenticate]: returned from eap (rlm_eap) for request 1088 Sat Jul 25 12:47:51 2015 : Debug: (1088) [eap] = invalid Sat Jul 25 12:47:51 2015 : Debug: (1088) } # authenticate = invalid Sat Jul 25 12:47:51 2015 : Debug: (1088) Failed to authenticate the user 3.0.8: Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Expiring EAP session with state 0x6843779268417367 Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Finished EAP session with state 0xa5b14de2a4bd57e0 Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Previous EAP request found for state 0xa5b14de2a4bd57e0, released from the list Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Peer sent method MSCHAPv2 (26) Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: EAP MSCHAPv2 (26) Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Calling eap_mschapv2 to process EAP data Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Freeing handler Sat Jul 25 12:52:12 2015 : Debug: (2534) modsingle[authenticate]: returned from eap (rlm_eap) for request 2534 Sat Jul 25 12:52:12 2015 : Debug: (2534) [eap] = ok Sat Jul 25 12:52:12 2015 : Debug: (2534) } # authenticate = ok Thanks, Mohamed.