Thierry CHICH wrote:
> However, it the accounting is always done with the outer identity
...
> Login OK: [thierry.chich at ac-clermont.fr/xxxxxxxx] (from client ap-rectorat02 
> port 0)
> +- entering group post-auth
>         expand: %{request.User-Name} ->
  That's a typo.  It should be ... "%{request:User-Name}"
  i.e. ':', not '.'.
  Alan DeKok.