Hi,
of the differences between the "branches" of the directory tree, is that the incorrect one is using Crypt passwords, and the correct one is using SSHA passwords. Seems that the SSHA passwords are not working while the Crypt passwords do.
well, as others have pointed out, theres an issue with the format of the name too. uid=xxxxx must match, you cant look for uid=user and expect uid=user@realm to match - so you may want to vary your ldap query based on the username - perhaps do a user-name check if theres a realm thats not handled properly? how does your LDAP server present the password? LDAP is not an authentication system, its an 'oracle' of values - so you may need to tell FreeRADIUS what format the reply value is - read the LDAP and FreeRADIUS password format docs eg http://wiki.freeradius.org/modules/rlm_ldap alan