Bad signatue error can't get radios autherized

User Manager is on a RB433 running 3.11 with IP of 10.20.66.2 /24
AP is on a RB411a running 3.11 with Ip of 10.20.66.253 /24
Both units are plugged in to the same switch
Set up is as per Wiki

As you can see the ap is talking to the user manager but does not get authenticated. I have tried EVERYTHING to get it working and the best I have done is to get a different error.

14:40:29 radius,debug,packet sending Access-Request with id 233 to 10.20.66.2:1812
14:40:29 radius,debug,packet Signature = 0x55fee0d103c5e07c60c2d2734cc32f1f
14:40:29 radius,debug,packet Service-Type = 2
14:40:29 radius,debug,packet NAS-Port-Id = “XR2-1”
14:40:29 radius,debug,packet User-Name = “00:0C:42:1F:79:BB”
14:40:29 radius,debug,packet Calling-Station-Id = “00-0C-42-1F-79-BB”
14:40:29 radius,debug,packet Called-Station-Id = “00-15-6D-63-E8-56:PMCNET-Dom-AP22S”
14:40:29 radius,debug,packet User-Password = 0x30303a30433a34323a31463a37393a42
14:40:29 radius,debug,packet 42
14:40:29 radius,debug,packet NAS-Identifier = “Domain-AP22S”
14:40:29 radius,debug,packet NAS-IP-Address = 10.20.66.253
14:40:29 radius,debug,packet received bad Access-Reject with id 233 from 10.20.66.2:1812
14:40:29 radius,debug,packet Signature = bad 0xe9801dc6ad519a14c75ede7f30ad084f
14:40:29 radius,debug received packet for 58:1762 with bad signature, dropping
14:40:29 radius,debug timeout for 58:1762


Erik