Requests don't contain an Auth-Type , that's a freeradius internal control attribute. If you run in debug mode you will see the contents of the radius datagram and for each packet you will see exactly what the radius server does which each packet...what policies and decisions are made and why alan