Hi, > # users > DEFAULT Auth-Type := eap > > DEFAULT Auth-Type := Kerberos > Fall-Through = 1 those are 2 conflicting entries. you should never need the first one. the second one is what you'll need...but the Fall-Through is superfluous alan