Hi,
I changed to "--domain=CFS.UOGUELPH.CA" and now it does not get any domains for machine authentication:
do...you did more than that...for some reason you now have *2* --username bits!!
Executing: /usr/bin/ntlm_auth --request-nt-key --username=%{%{mschap:User-Name}:-00} --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --domain=CFS.UOGUELPH.CA --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}:
thus:
(8) mschap : EXPAND --username=%{%{mschap:User-Name}:-00} (8) mschap : --> --username=CCS-252$
(8) mschap : EXPAND --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} (8) mschap : --> --username=host/CCS-252.cfs.uoguelph.ca
...err, yes...and NOW the server uses this broken version. delete that second entry so just CCS-252$ is used as you had before. alan