What I'ld like to do is to fix it so that only certain usernames could log on as username@realm3.com (leave realm1.com and realm2.com as they are). So anyone with a correct username/password could log in using realm1.com or realm2.com but only bob, jane and alex could log in with realm3.com.
I suppose I could add an entry in my users file as so:
bob Realm=realm3.com, Auth-Type = Local, Password == xxxxx Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 255.255.255.254, Framed-IP-Netmask = 255.255.255.255, Framed-Routing = None, Framed-Compression = None, Framed-MTU = 1500
This will also limit bob to realm3, so he would not be able to log in as realm1 or 2. Create a huntgroup for realm3 (leave users entry for it as it is) and list usernames that can log into it there. Unlisted users will not be able to log in. Ivan Kalik Kalik Informatika ISP