>when I use the with-ntdomain-hack=no the result is : > Where is that line? You should enable it in mschap module. It shouldn't have any effect on EAP Identity. >[peap] Had sent TLV failure. User was rejected earlier in this session. Debug you posted is useless. You have deleted the important bits. Ivan Kalik Kalik Informatika ISP