It would break EAP? If I enter my own creds and leave the Domain null it works great.... ----- Original Message ----- From: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org <freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thu Oct 01 03:39:34 2009 Subject: Re: Stripping windows domain with dot1x and peap

I'm back on this issue again. 2.1.6 on FBSD and RHEL. When doing 8021x auth using winblows xp supplicant (wired) and the setting "use my windows username and password", I can't seem to get FR to strip the domain name.

Good. Because that would break EAP.

I have the nt hack enabled in a couple places. Also read about using "realms" modules instead of enabling nt hack. Tried both as well as a couple different "--username" tweaks to no avail.

Can someone point me in the right direction? I tried playing eap, mschap, default, innertunnel, etc.

Use ntdomain. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>