On 28/10/10 16:14, Sallee, Stephen (Jake) wrote: > Did you enable the “WITH NT DOMAIN HACK” in your MSCHAP module? Oops, well spotted - disregard my email. Jake is right - you have "DOMAIN\user" going into ntlm_auth, which may be messing up the challenge/response calculation.