For the MSChapV2 protocol the Authenticator Response is 42 bit, according to RFC 2759, Sect. 8.7. What is the reason, in file eap_mschapv2.c, eap_ttls.c, only 20 bits are checked? in line memcmp(data->auth_response, recv_response, 20) != 0) Thanks, Andrew -- http://www.fastmail.fm - IMAP accessible web-mail