Auth-Type := Accept - CHAP problems

[Alan DeKok]

Thomas Buchberger wrote:
> With PAP it works - but not with CHAP. That's the problem ...
> I think the CHAP module handles wrong passwords and auth-type different
> than the rlm_pap module.

  No.  It doesn't.

> Config looks like this:
> 
> DEFAULT        Auth-Type := Accept

  This completely bypasses any password checks.

>     ERX-Virtual-Router-Name = "vpn:XXX",
>     ERX-Egress-Policy-Name = "XXX",
>     ERX-Local-Loopback-Interface = "loopback 255",
>     Service-Type = Framed-User,
>     Framed-Protocol = PPP,
>     Fall-Through = Yes
> 
> Test100 Password = "Test100"

  Use:

Test100	Cleartext-Password := "Test100"

  That's been documented since at least 1.1.4.

  Alan DeKok.