On Fri, May 4, 2012 at 1:15 PM, dhanushka ranasinghe <parakrama1282 at gmail.com> wrote: > Hi.. > > when i removed "Auth-Type := PAP" line radius not checking > password , even when wrong password is used user get the > authenticated. What does the debug log say? My guess is you have Auth-Type := Accept somewhere. -- Fajar