OK, this makes a little more sense now, I added .. realm DEFAULT { } to proxy.conf, I now get .... rlm_realm: Looking up realm "HOST" for User-Name = "HOST\NAME" rlm_realm: Found realm "DEFAULT" rlm_realm: Adding Stripped-User-Name = "NAME" rlm_realm: Adding Realm = "DEFAULT" rlm_realm: Authentication realm is LOCAL. ++[prefix] returns ok I needed to add with_ntdomain_hack = yes to the mschap file and now everything works !!!!! Many thanks to Alan Regards, Bruce Richardson From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: 04/09/2008 16:22 Subject: Re: eDirectory + peap + LDAP + Cisco AP1242 + Windows XP(SP3) Bruce_M_Richardson@biscuits.com wrote:
So should I create a realm called DEFAULT, or is DEFAULT a parameter to be used with a realm ?
Read raddb/proxy.conf. Look for DEFAULT.
prefix is before suffix, I assumed that it would match first.
Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Please consider the environment - do you really need to print this email? ________________________________________________________________________________________ This e-mail and any attachments are confidential and solely for the use of the intended recipient. They may contain material protected by legal professional or other privilege. If you receive it in error, please delete it from your system, make no copies of it, do not disclose its contents to any third party or use it for your own or any other person's benefit. Please advise the sender of its receipt as soon as possible. Although this email and its attachments are believed to be free of any virus or other defect, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by the company for any loss or damage arising from receipt or use thereof. Any opinions expressed that do not relate to the official business of the company are those of the author, not the United Biscuits group of companies. United Biscuits (UK) Limited Registered in England number 2506007 Registered Office: Hayes Park, Hayes End Road, Hayes, Middlesex, UB4 8EE ________________________________________________________________________________________