I'm getting close to being able to commit some of the massive changes I've been talking about. No "magic" features yet, but the code is much better. However... as part of the changes, I think I've got to clean up the handling of realms. With a bit more work, I think I can make the old-style "realms" configurations map to the new method when the server starts up. The more complicated piece is the "realms" module. The whole "ignore_null" and "ignore_default" configuration is wrong. It can probably be done via the new "if/then/else" in the authorize section. I'll see if I can figure out a decent way of getting that to work. I'd also like to move the rlm_realm configs prefix/suffix && "delimiter" to the individual "realms" section in proxy.conf, but that might break things. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog