pam_radius requires setting Auth-Type ?

[Alan DeKok]

NdK wrote:
> We just added pam_radius to our vpn host, to authenticate vpn users
> throught our (working) RADIUS server.
> 
> IIUC pam_radius is sending a PAP message:
...
> But if I don't add (in users file) a line like:
> DEFAULT NAS-Identifier == "openvpn", Auth-Type := PAP
> FR complains:
> ERROR: No authenticate method (Auth-Type) found for the request:
> Rejecting the user

  You probably deleted "pap" from the "authorize" section of
raddb/sites-available/default.

> IIUC, Auth-Type should never be set manually, so I'm quite sure I'm
> missing something...
> Could you please point me in the right direction?

  Don't break the configurtion.

  Alan DeKok.