mschap {
	# Send MS-CHAP-Error with E=691 on authentication failure,
	# so iOS / Windows show "Incorrect Password" instead of "Unable to join network".
	send_error = yes
	use_mppe = yes
	require_encryption = yes
	require_strong = yes
	with_ntdomain_hack = yes
}