>I would use unlang to see if the User-Name matches "^host/", and >if so call a different instantiation of mschap configured for >machine auth instead, rather than trying to configure one instance >of mschap to magically work with both. > +1 we do similar to that ....for eduroam...not sure what that Eduroam is ;) alan