John Horne <[EMAIL PROTECTED]> wrote: > As can be seen it says 'Login OK' but seems to be missing the: > > Sending Access-Accept of id 209 to 127.0.0.1:40603 > MS-CHAP2-Success = > 0x01533d36364635423233344331414344363438463746353946443832353834324437424131433645464332
Ah, yes. For that, the server needs access to the user's password. Since you want it to authenticate *anyone* using MS-CHAP, you'll need to supply all the server with all of their passwords. In which case, you might as well let the MSCHAP module just authenticate them normally. MS-CHAPv2 is two-way authentication. There's no way to get around that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

