Your command line test didn't have a domain. Your freeradius request does have a realm - DOMAIN.LOCAL . Is that deliberate? alan