Thanks tarnold
The normal web login page works as expected - username and password entered and submitted are passed to NAS unmolested.
It is the sponsor receipt page after the sponsor confirms the guest. The input that the NAS receives from clicking the submit button arrives at the NAS with 3s inserted. and then the NAS submits what it gets to the radius server.
the normal login form for guests with accounts already
2014-06-20 13:16:54 debug ah_capture: [cgic_basic]: post input: password=50657397&username=sam%40j.com&Submit2=Submit&url=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-06-20 13:16:54 debug ah_capture: [cgic_basic]: Calling PostFormInput
2014-06-20 13:16:54 debug ah_capture: [cgic_basic]: POST recognized
2014-06-20 13:16:54 debug ah_capture: [cgic_verbose]: Submit2=Submit
2014-06-20 13:16:54 debug ah_capture: [cgic_verbose]: username=sam@j.com
2014-06-20 13:16:54 debug ah_capture: [cgic_verbose]: password=5***
2014-06-20 13:16:54 notice ah_capture: authentication OK, username sam@j.com, service
for the sponsor receipt page submit for guest self-registered with sponsor approval
2014-06-20 13:15:29 debug ah_capture: [cgic_basic]: post input: username=sam%40j.com&password=
3530363537333937&Submit2=Submit&url=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-06-20 13:15:29 debug ah_capture: [cgic_basic]: Calling PostFormInput
2014-06-20 13:15:29 debug ah_capture: [cgic_basic]: POST recognized
2014-06-20 13:15:29 debug ah_capture: [cgic_verbose]: Submit2=Submit
2014-06-20 13:15:29 debug ah_capture: [cgic_verbose]: password=3***
2014-06-20 13:15:29 debug ah_capture: [cgic_verbose]: username=
sam@j.com
So if I understand your post, you are saying the NAS is somehow changing the post information?
Because the debug looks like the NAS just passes along what it receives
Cheers