Auth-Test accounts in "users" file

[Alan DeKok]

James McOrmond wrote:
>>   Yes.  But don't set Auth-Type.  Please.
>>   
> you seem to have a real issue with it :-)

  Because almost everyone gets it wrong, and then argues about it...

> I specifically want the test-pap account to fail if the authentication
> method used is anything but pap.  I don't see that restriction here.

  PAP authentication means that there is a User-Password attribute in
the request.  The sample config I posted checks that, and if there's
*no* User-Password, rejects the user.

  Alan DeKok.