don't set Auth-Type from Authentication-Type

They're both integers, and their enumeration values are different.
the names are the same, but we can't copy names.

Or maybe we want to do that?

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index c9394a64a723e32a9efa447775658258ea523674..4a219c3089a59ff20856e52d38f8e601dbf40cde 100644 (file)
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -273,13 +273,17 @@ server tacacs {
        #
        #  ### Recv
        #
-       recv Authentication-Start {
+       recv Authentication-Start {
                -sql
 
                #
-               #  Set _our_ authentication method to the _requested_ one.
+               #  In general, it is not necessary to set `Auth-Type` here.  The packet header
+               #  contains a TACACS `Authentication-Type` with value `PAP`, `CHAP`, etc.  That value will
+               #  be used automatically.
+               #
+               #  The only reason to set `Auth-Type` here is when you want to use a custom
+               #  authentication method, such as `ldap`.
                #
-               &control.Auth-Type := &Authentication-Type
        }
 
        authenticate PAP {