Where is this coming from?

I put a default entry at the button of users file.

http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg51143.html

My users file:

debian:/etc/freeradius# cat users

DEFAULT   Auth-Type := Reject

bob    Cleartext-Password := "hello"
    Reply-Message = "Hola %{User-Name}"

The default configuration has *no* "Auth-Type = Reject" setting. You
have added this locally.

I follow this howto http://wiki.freeradius.org/SQL_Huntgroup_HOWTO and, at the button said:

Note: If you want to reject authentication by default then edit the raddb/users file and add this:

DEFAULT   Auth-Type := Reject

Then add Auth-Type Accept with := as op in radgroupcheck for each group.