Hi, this would then just strip of the Domainname from the --username parameter. So its lost. If possile i like to keep it eithere in the username or if i can get it in anothere variable (will check rlm_mschap if thee is one) to feed this into --domain. In case its Empty i could pace a Default Domain there or just let i fail. Because if i dont keep it and hand it over to the ntlm i belive i can only authenticate against one Domain. In case of Trusted Domains liek TEST1 TEST2 TEST3 i need to tell ntlm (and then the PDC to whom i authenticate against) in which Domain the user is. At the End i like to use what is supplied on the Logon Screen in Windows and there the Domain is importand as well. Bye Holger tnt@kalik.net wrote:
--username=%{Stripped-User-Name:-%{User-Name:-None}}
Try mschap:User-Name. That suggestion should be right above ntlm_auth line in mschap configuration.
Ivan Kalik Kalik Inormatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html