Freeradius Server v2.1.4. All clients are authenticating properly, except for clients that pass a ntdomain\userid. I have configured proxy.conf, realm and inner-tunnel in the past (i.e. v2.0.5) to handle these requests without issue. As of v2.0.6 and greater, clients are no longer authenticating. The debug logs seem to indicate login success. WinXP SP3 wireless client using latest IBM Thinkvantage software. --- debug log --- rad_recv: Access-Request packet from host 10.5.251.2 port 1645, id=191, length=248 User-Name = "SMBDOM\\userid" Framed-MTU = 1400 Called-Station-Id = "0017.0fdd.e701" Calling-Station-Id = "0005.4e41.ec86" Service-Type = Login-User Message-Authenticator = 0xacbf72d2001dfb409e9924fcdc973b1f EAP-Message = 0x02090050190017030100203438196b413d6f8f767ff2592331e9f6327862d45efe5ed8 084bb77a96c2987c1703010020182885154796afcf433e43f64e253e3960dd238a412d6f a974474d9da1a75899 NAS-Port-Type = Wireless-802.11 NAS-Port = 1674 NAS-Port-Id = "1674" State = 0xb2e30b4db5ea124aad52ba89ddbd4668 NAS-IP-Address = 10.5.251.2 NAS-Identifier = "head_office_wireless_2" - entering group authorize {...} [preprocess] returns ok [chap] returns noop [mschap] returns noop [suffix] No '@' in User-Name = "SMBDOM\userid", looking up realm NULL [suffix] No such realm "NULL" [suffix] returns noop [SMBDOM] Looking up realm "SMBDOM" for User-Name = "SMBDOM\userid" [SMBDOM] Found realm "SMBDOM" [SMBDOM] Adding Stripped-User-Name = "userid" [SMBDOM] Adding Realm = "SMBDOM" [SMBDOM] Authentication realm is LOCAL. [SMBDOM] returns ok [eap] EAP packet type response id 9 length 80 [eap] Continuing tunnel setup. [eap] returns ok Found Auth-Type = EAP - entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] eaptls_verify returned 7 [peap] Done initial handshake [peap] eaptls_process returned 7 [peap] EAPTLS_OK [peap] Session established. Decoding tunneled attributes. [peap] EAP type mschapv2 [peap] Got tunneled request EAP-Message = 0x020900061a03 server { PEAP: Setting User-Name to SMBDOM\userid Sending tunneled request EAP-Message = 0x020900061a03 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "SMBDOM\\userid" State = 0xa2f7c944a3fed33462945b4e374f79ce server inner-tunnel { - entering group authorize {...} [chap] returns noop [mschap] returns noop [unix] returns notfound [suffix] No '@' in User-Name = "SMBDOM\userid", looking up realm NULL [suffix] No such realm "NULL" [suffix] returns noop [SMBDOM] Looking up realm "SMBDOM" for User-Name = "SMBDOM\userid" [SMBDOM] Found realm "SMBDOM" [SMBDOM] Adding Stripped-User-Name = "userid" [SMBDOM] Adding Realm = "SMBDOM" [SMBDOM] Authentication realm is LOCAL. [SMBDOM] returns ok [control] returns ok [eap] EAP packet type response id 9 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation [eap] returns updated [files] users: Matched entry userid at line 1385 [files] returns ok [expiration] returns noop [logintime] returns noop [pap] Found existing Auth-Type, not changing it. [pap] returns noop Found Auth-Type = EAP - entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/mschapv2 [eap] processing type mschapv2 [eap] Freeing handler [eap] returns ok Login OK: [SMBDOM\\userid] (from client private-network-5 port 0 via TLS tunnel) } # server inner-tunnel [peap] Got tunneled reply code 2 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 255.255.255.254 EAP-Message = 0x03090004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "userid" [peap] Got tunneled reply RADIUS code 2 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 255.255.255.254 EAP-Message = 0x03090004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "userid" [peap] Tunneled authentication was successful. [peap] SUCCESS [eap] returns handled Sending Access-Challenge of id 191 to 10.5.251.2 port 1645 EAP-Message = 0x010a002b19001703010020b5c3cd4e27abb67bc4536c0829ed6f45c07edbfb2f42c758 649472d7b8857cb2 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xb2e30b4dbae9124aad52ba89ddbd4668 Finished request 8. --- end debug log --- Thanks for any assisantance