It finally works.  Looks the format changed.     --domain=%{mschap:NT-Domain:-xjtu}      ==> works in freeradius-1.1.x, 2.1.x not works --domain=%{%{mschap:NT-Domain}:-xjtu}   ==> works in freeradius-2.1.x, 1.1.x not works --- 10年7月8日，周四, John <elmer_radius@yahoo.com.cn> 写道： 发件人: John <elmer_radius@yahoo.com.cn> 主题: Re: ntlm_auth fails for none domain 收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> 日期: 2010年7月8日,周四,下午2:10   Sorry. I did not set the 'xjtu' in the first time. But I set 'xjtu' after that. Pls see the second mail I wrote.   I put ntlm_auth line to file 'mschap'. The attached file is my 'mschap' and the related debug info. --- 10年7月5日，周一, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> 写道： 发件人: Alan Buxey <A.L.M.Buxey@lboro.ac.uk> 主题: Re: ntlm_auth fails for none domain 收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> 日期: 2010年7月5日,周一,下午4:53 Hi, no...you havent added it. look, heres the debug you supplied

It is the related part in configuration file: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain:-xjtu} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"

It is debug info: [mschap] Told to do MS-CHAPv2 for hhe with NT-Password [mschap] No NT-Domain was found in the User-Name. [mschap]  expand: --domain=%{mschap:NT-Domain} -> --domain=                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^

where is xjtu mentioned there?  is isnt. WHERE did you put the ntlm_auth line?  alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html