Hello, Not sure what I'm missing here, i seem to not be able to get this to work. One of those things, I've done it many times yet I've missed a step I think. This server is used to authenticate pppoe connections on a cisco router. I just want freeradius to strip the realm every time. Debian Wheezy freeradius -XX Sun Jun 9 16:43:58 2013 : Info: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Dec 16 2012 at 13:28:43 It works fine without a realm, returns all the right values; root@chronos:/etc/freeradius# radtest testaccount test1234 localhost 0 testing123 Sending Access-Request of id 95 to 127.0.0.1 port 1812 User-Name = "testaccount" User-Password = "test1234" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=95, length=56 Framed-IP-Address = 10.8.13.19 Tunnel-Type:0 = L2TP Tunnel-Medium-Type:0 = IPv4 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.255 root@chronos:/etc/freeradius# With a realm, no good. rad_recv: Access-Request packet from host 127.0.0.1 port 52011, id=44, length=92 User-Name = "testaccount@domain.com" User-Password = "test1234" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x6c233bef9def046c0b422486e2aef3a1 Sun Jun 9 16:46:05 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default Sun Jun 9 16:46:05 2013 : Info: +- entering group authorize {...} Sun Jun 9 16:46:05 2013 : Info: ++[preprocess] returns ok Sun Jun 9 16:46:05 2013 : Info: ++[chap] returns noop Sun Jun 9 16:46:05 2013 : Info: ++[mschap] returns noop Sun Jun 9 16:46:05 2013 : Info: ++[digest] returns noop Sun Jun 9 16:46:05 2013 : Info: [suffix] Looking up realm "domain.com" for User-Name = "testaccount@domain.com" Sun Jun 9 16:46:05 2013 : Info: [suffix] No such realm "domain.com" Sun Jun 9 16:46:05 2013 : Info: ++[suffix] returns noop Sun Jun 9 16:46:05 2013 : Info: [eap] No EAP-Message, not doing EAP Sun Jun 9 16:46:05 2013 : Info: ++[eap] returns noop Sun Jun 9 16:46:05 2013 : Info: ++[files] returns noop Sun Jun 9 16:46:05 2013 : Info: [sql] expand: %{User-Name} -> testaccount@domain.com Sun Jun 9 16:46:05 2013 : Info: [sql] sql_set_user escaped user --> ' testaccount@domain.com' Sun Jun 9 16:46:05 2013 : Debug: rlm_sql (sql): Reserving sql socket id: 3 Sun Jun 9 16:46:05 2013 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = ' testaccount@domain.com' ORDER BY id Sun Jun 9 16:46:05 2013 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'testaccount@domain.com' ORDER BY priority Sun Jun 9 16:46:05 2013 : Debug: rlm_sql (sql): Released sql socket id: 3 Sun Jun 9 16:46:05 2013 : Info: [sql] User testaccount@domain.com not found Sun Jun 9 16:46:05 2013 : Info: ++[sql] returns notfound Sun Jun 9 16:46:05 2013 : Info: ++[expiration] returns noop Sun Jun 9 16:46:05 2013 : Info: ++[logintime] returns noop Sun Jun 9 16:46:05 2013 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Sun Jun 9 16:46:05 2013 : Info: ++[pap] returns noop Sun Jun 9 16:46:05 2013 : Info: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Sun Jun 9 16:46:05 2013 : Info: Failed to authenticate the user. Sun Jun 9 16:46:05 2013 : Info: Using Post-Auth-Type Reject Sun Jun 9 16:46:05 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/default Sun Jun 9 16:46:05 2013 : Info: +- entering group REJECT {...} Sun Jun 9 16:46:05 2013 : Info: [attr_filter.access_reject] expand: %{User-Name} -> testaccount@domain.com Sun Jun 9 16:46:05 2013 : Debug: attr_filter: Matched entry DEFAULT at line 11 Sun Jun 9 16:46:05 2013 : Info: ++[attr_filter.access_reject] returns updated Sun Jun 9 16:46:05 2013 : Info: Delaying reject of request 0 for 1 seconds Sun Jun 9 16:46:05 2013 : Debug: Going to the next request Sun Jun 9 16:46:05 2013 : Debug: Waking up in 0.9 seconds. Sun Jun 9 16:46:06 2013 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 44 to 127.0.0.1 port 52011 Sun Jun 9 16:46:06 2013 : Debug: Waking up in 4.9 seconds. I don't recall having to setup a realm in previous installs. However I did used to use an older version of freeradius. Thanks in advance :) Jules.