I have an old instance of icradius - which - when users had a static IP allocated - login would fail if there was a realm present but work just fine if the realm was missing. This was in the old, dark days - when everyone was in the same realm. Now - freeradius works just fine with a full realm based login and statc IP but I have a number of users both with and without static IP's who don't have their realm as part of their login ID.. ie rather than 'joe@pop.co.za' - they just use 'joe'. The easiest solution would be - if (REALM == NULL) - add on the default realm. There are about 10 different realms being used - as well as the 'default'. Anyway.. In proxy.conf - I have uncommented .. realm NULL { type = radius authhost = LOCAL accthost = LOCAL } (This is now the last 'realm' definition in this file - in case order matters. 'DEFAULT' is still commented) In my sql.conf - I have code that looks like... ... Username='%{Stripped-User-Name}' AND realm='%{Realm:-pop.co.za}' AND .... ie - if the REALM is missing - it should default to 'pop.co.za'... Anyway - still getting incorrect logins.... A radiusd -X shows me that .."WHERE Username='mje' AND realm='NULL' AND"... ie - If there is no realm - its set to the string of four characters 'NULL' rather than the string '\0' .. not what I was hoping for... If the realm is missing - it can only refer to a user in the 'pop.co.za' realm - and no other. Suggestions? ie - the equivalent of ... if( ${Realm} == "NULL") Realm="pop.co.za" ..put somewhere. ps. It would be very useful if one could run radiusd in '-X' mode based on some criteria - such as the Realm or the Nas, especially on a busy server - just for matching packets. (in proxy.conf .. syntax of realm myrealm.com { type = radius authhost = LOCAL accthost = LOCAL debug = yes } or in clients.conf client access.pop.co.za { secret = very shortname = access nastype = cisco debug = yes } ) -- . . ___. .__ Posix Systems - Sth Africa /| /| / /__ mje@posix.co.za - Mark J Elkins, SCO ACE, Cisco CCIE / |/ |ARK \_/ /__ LKINS Tel: +27 12 807 0590 Cell: +27 82 601 0496