Re: Auth-Type := Accept - CHAP problems

Thomas Buchberger wrote:

With PAP it works - but not with CHAP. That's the problem ... I think the CHAP module handles wrong passwords and auth-type different than the rlm_pap module.

No. It doesn't.

Config looks like this:

DEFAULT Auth-Type := Accept

This completely bypasses any password checks.

ERX-Virtual-Router-Name = "vpn:XXX", ERX-Egress-Policy-Name = "XXX", ERX-Local-Loopback-Interface = "loopback 255", Service-Type = Framed-User, Framed-Protocol = PPP, Fall-Through = Yes

Test100 Password = "Test100"

Use: Test100 Cleartext-Password := "Test100" That's been documented since at least 1.1.4. Alan DeKok.