Thor Spruyt wrote:

Normally I have entries like this: ausername Auth-Type := Local, User-Password == "apassword"

Don't use Auth-Type. Use ':=', not '=='. user User-Password := "password" This will let PAP work, CHAP, MSCHAP, etc. See: http://deployingradius.com/documents/configuration/pap.html

I actually need a method to let both PAP and CHAP succeed, it's up to the user to decide what to use.

Tell the server what the "known good" password is, and the server will figure out the rest. I have a patch pending for 1.1.4 that adds "Cleartext-Password", and removes much of the confusion around putting User-Password in the "users" file, or other places in the configuration. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog