Thierry CHICH wrote: > However, it the accounting is always done with the outer identity ... > Login OK: [thierry.chich at ac-clermont.fr/xxxxxxxx] (from client ap-rectorat02 > port 0) > +- entering group post-auth > expand: %{request.User-Name} -> That's a typo. It should be ... "%{request:User-Name}" i.e. ':', not '.'. Alan DeKok.