>--username=%{Stripped-User-Name:-%{User-Name:-None}} Try mschap:User-Name. That suggestion should be right above ntlm_auth line in mschap configuration. Ivan Kalik Kalik Inormatika ISP