Use lower case 'authenticate' section names in the default config. Fixes #2220

diff --git a/raddb/sites-available/challenge b/raddb/sites-available/challenge
index af852fd4b0a2afc452a6f3ba9d9b85d07b56e4da..89f0ddc2152e601709bdc8ba51c7f74d1c70a621 100644 (file)
--- a/raddb/sites-available/challenge
+++ b/raddb/sites-available/challenge
@@ -43,7 +43,7 @@ recv Access-Request {
 }
 
 
-authenticate Step1 {
+authenticate step1 {
        #  If the password doesn't match, the user is rejected
        #  immediately.
        pap
@@ -66,7 +66,7 @@ authenticate Step1 {
        challenge
 }
 
-authenticate Step2 {
+authenticate step2 {
        #
        #  Do PAP authentication with the password.
        #

diff --git a/raddb/sites-available/inner-tunnel b/raddb/sites-available/inner-tunnel
index e6a06ccb8494ff36f2e7e8653a4cdf7c4eb96380..9942c7ac251822d2be21a0a2dcd672eadeb9d92a 100644 (file)
--- a/raddb/sites-available/inner-tunnel
+++ b/raddb/sites-available/inner-tunnel
@@ -180,7 +180,7 @@ recv Access-Request {
 #  PAP authentication, when a back-end database listed
 #  in the 'authorize' section supplies a password.  The
 #  password can be clear-text, or encrypted.
-authenticate PAP {
+authenticate pap {
        pap
 }
 
@@ -189,13 +189,13 @@ authenticate PAP {
 #  A back-end database listed in the 'authorize' section
 #  MUST supply a CLEAR TEXT password.  Encrypted passwords
 #  won't work.
-authenticate CHAP {
+authenticate chap {
        chap
 }
 
 #
 #  MSCHAP authentication.
-authenticate MS-CHAP {
+authenticate ms-chap {
        mschap
 }
 
@@ -216,7 +216,7 @@ authenticate pam {
 #  authentication server, and knows what to do with authentication.
 #  LDAP servers do not.
 #
-#authenticate LDAP {
+#authenticate ldap {
 #      ldap
 #}
 

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index 0734ba35ac833a43b4d77b85ef84ac2d1302a9a6..c9487dff843c34117e1784bf976b52c7d016c66d 100644 (file)
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -252,15 +252,15 @@ server tacacs {
 
        # Proxying of TACACS+ requests is NOT supported.
 
-       authenticate MSCHAP {
+       authenticate mschap {
                mschap
        }
 
-       authenticate CHAP {
+       authenticate chap {
                chap
        }
 
-       authenticate PAP {
+       authenticate pap {
                pap
        }
 }