On Sep 22, 2015, at 12:21 AM, Ian Chang-張志邦 <Ian.Chang at zyxel.com.tw> wrote: > Is it better do this in pam_radius_auth? No. Changing the client doesn't change the fact that it still uses PAP. Alan DeKok.