here is what I am seeing since uncommenting the "nostrip" (168) # Executing section authorize from file /etc/raddb/sites-enabled/default (168) authorize { (168) filter_username filter_username { (168) if (!&User-Name) (168) if (!&User-Name) -> FALSE (168) if (&User-Name =~ / /) (168) if (&User-Name =~ / /) -> FALSE (168) if (&User-Name =~ /@.*@/ ) (168) if (&User-Name =~ /@.*@/ ) -> FALSE (168) if (&User-Name =~ /\\.\\./ ) (168) if (&User-Name =~ /\\.\\./ ) -> FALSE (168) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\\.(.+)$/)) (168) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\\.(.+)$/)) -> FALSE (168) if (&User-Name =~ /\\.$/) (168) if (&User-Name =~ /\\.$/) -> FALSE (168) if (&User-Name =~ /@\\./) (168) if (&User-Name =~ /@\\./) -> FALSE (168) } # filter_username filter_username = notfound (168) WARNING: preprocess : There are more than 10 Proxy-State attributes in the request (168) WARNING: preprocess : You have likely configured an infinite proxy loop (168) [preprocess] = ok (168) [chap] = noop (168) [mschap] = noop (168) [digest] = noop (168) suffix : Checking for suffix after "@" (168) suffix : Looking up realm "example.com" for User-Name = "user@example.com" (168) suffix : Found realm "example.com" (168) suffix : Adding Realm = "example.com" (168) suffix : Proxying request from user user@example.com to realm example.com (168) suffix : Preparing to proxy authentication request to realm "example.com" (168) [suffix] = updated (168) eap : Request is supposed to be proxied to Realm example.com. Not doing EAP. (168) [eap] = noop (168) [files] = noop (168) sql : EXPAND %{User-Name} (168) sql : --> user@example.com (168) sql : SQL-User-Name set to 'user@example.com' rlm_sql (sql): Reserved connection (4) (168) sql : EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (168) sql : --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'user@example.com' ORDER BY id rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'user@example.com' ORDER BY id' (168) sql : EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (168) sql : --> SELECT groupname FROM radusergroup WHERE username = 'user@example.com' ORDER BY priority rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = 'user@example.com' ORDER BY priority' (168) sql : User not found in any groups rlm_sql (sql): Released connection (4) (168) [sql] = notfound (168) [expiration] = noop (168) [logintime] = noop (168) [pap] = noop (168) } # authorize = updated (168) Proxying request to home server 127.0.0.1 port 1812 timeout 20.000000 (168) Sending Access-Request packet to host 127.0.0.1 port 1812, id=152, length=0 (168) User-Name = 'user@example.com' (168) NAS-IP-Address = 10.250.8.180 (168) Called-Station-Id = 'c8d71992a9d7' (168) Calling-Station-Id = '00c01732012e' (168) NAS-Identifier = 'c8d71992a9d7' (168) NAS-Port = 29 (168) Framed-MTU = 1400 (168) NAS-Port-Type = Wireless-802.11 (168) EAP-Message = 0x020000150175736572406578616d706c652e636f6d (168) Message-Authenticator = 0xbeb9ebda3594a94e4cef4cb918c81000 (168) Event-Timestamp = 'Jul 8 2015 14:48:00 MDT' (168) Proxy-State = 0x30 On Jul 08, 2015, at 02:40 AM, A.L.M.Buxey@lboro.ac.uk wrote: Hi, I tried uncommenting the line nostrip from the proxy.con. that didn’t work. ....and...... (what does the debug NOW look like? ) if you dont help us, by providing that output, we cannot help you. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html