Robert Mc Cready wrote: > The host name are not domain names, there are computers account name, and we > have hundreds of them . We only use the MS Domain to authenticate the > computers account, not the users.
Well... re-writing the names in the "inner-tunnel" server is breaking authentication. *Why* are you re-writing them? What do you expect to do with the names? Why isn't there another way to achieve the same goal? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

