Hi Phil, filter =
"(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$))"
Don't do that. Instead try:
filter = "(uid=%{mschap:User-Name})"
Hm, this is not working. I also don't get the point, why the username in mschap is mangled to have a $ or not? The Windows-Worstation query their name as "host/workstation", which is workstation$ in my ldap. My Users are coming in as "user", so where else doing the lookup than in ldap module? The "host/" realm is stripped off before. I made now a workaround with ...%{User-Name}}*))" This will match workstation and workstationWHATEVER. Not very elegant, but I assume a bug in the ldap-module, because every other char works, just $ not. If you could explain your point, I might look through it. TIA Alex