Hi, > For the record my authentication mechanism is Ldap and the EAP type is > EAP-PEAP with MSCHAP v2.
okay , is 'peap' set as the default EAP type at top of eap.conf (to remove a couple of packets...the NAK ) is your ldap auth in inner-tunnel protected from all EAP stuff going on ....or do you see each request hitting your LDAP server 3 or 4 times? how fast can your LDAP respond - this would be a bottleneck. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

