Hi. how can i config FR <-join->AD Client is Windows 10 mschap [auth type mschap, machine authenticaiton] my case below error(machine authenticaiton)... (but auth type mschap user authentication is fine) Thanks. -- ri Oct 9 10:56:30 2020 : Debug: (56) sql: SQL query returned: success Fri Oct 9 10:56:30 2020 : Debug: (56) sql: 1 record(s) updated Fri Oct 9 10:56:30 2020 : Debug: ppx_sql (sql): Released connection (9) Fri Oct 9 10:56:30 2020 : Debug: (56) modsingle[post-auth]: returned from sql (rlm_sql) Fri Oct 9 10:56:30 2020 : Debug: (56) [sql] = ok Fri Oct 9 10:56:30 2020 : Debug: (56) modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter) Fri Oct 9 10:56:30 2020 : Debug: %{User-Name} Fri Oct 9 10:56:30 2020 : Debug: Parsed xlat tree: Fri Oc! t 9 10:56:30 2020 : Debug: attribute --> User-Name Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: EXPAND %{User-Name} Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: --> host/park.test.com Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: Matched entry DEFAULT at line 1 Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: EAP-Message = 0x040e0004 allowed by EAP-Message =* 0x Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: Attribute "EAP-Message" allowed by 1 rules, disallowed by 0 rules Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: Message-Authenticator = 0x00000000000000000000000000000000 allowed by Message-Authenticator =* 0x Fri Oct 9 10:56:30 2020 : Debug: (56) attr_filter.access_reject: Attribute "Message-Authenticator" allowed by 1 rules, disallowed by 0 rules Fri Oct 9 1! 0:56:30 2020 : Debug: (56) modsingle[post-auth]: returned from attr_filter.access_reject (rlm_attr_filter) Fri Oct 9 10:56:30 2020 : Debug: (56) [attr_filter.access_reject] = updated Fri Oct 9 10:56:30 2020 : Debug: (56) } # Post-Auth-Type REJECT = updated Fri Oct 9 10:56:30 2020 : Auth: (56) Login Fail (eap: Failed continuing EAP PEAP (25) session. EAP sub-module failed): [host/park.test.com] (from client ALL port 0 cli F4-5C-89-9C-54-49) Fri Oct 9 10:56:30 2020 : Debug: (56) Delaying response for 1.000000 seconds Fri Oct 9 10:56:30 2020 : Debug: Waking up in 0.3 seconds. Fri Oct 9 10:56:30 2020 : Debug: Waking up in 0.6 seconds. Fri Oct 9 10:56:31 2020 : Debug: (56) Sending delayed response Fri Oct 9 10:56:31 2020 : Debug: (56) Sent Access-Reject Id 40 from 192.168.255.22:1812 to 192.168.255.21:45726 length 44 Fri Oct 9 10:56:31 2020 : Debug: (56) EAP-Message = 0x040e0004 Fri Oct&nb! sp; 9 10:56:31 2020 : Debug: (56) Message-Authenticator = 0x00000000000000000000000000000000 Fri Oct 9 10:56:31 2020 : Debug: Waking up in 3.7 seconds. -- [PutAck.jsp?ack_args=c2VudF9maWxlPWZkZEBrb3JlYS5jb20vLlNlbnQvMTYwMjIxMT Y1Mjc0NC4zMDIzNS5rb3JlYSZzZW5kX2RhdGU9MjAyMDEwMDkxMTQ3MzImc3ViamVjdD1Ib 3cgdG8gY29uZmlnIEZSIDMuMC54ICg8LT5BRCA8LVdpbmRvd3MgMTApIENvbXB1dGVyKG1h Y2hpbmUpIGF1dGhlbnRpY2F0aW9uIE1TQ0hBUD8=&to_email=freeradius-users@list s.freeradius.org_______________________________________________________ __________________________________________________________]