
authorize {
	preprocess
	mschap
	suffix
	expiration
	logintime
	pap
        if (!control:Auth-Type) {
		update control {
			Auth-Type = "ntlm_auth"
		}
		if ("%{request:User-Name}" =~ /^(.*)\\\\(.*)/) {
			update request {
				Stripped-User-Name := "%{2}"
					Realm := "%{1}"
			}
		}
	}
}

authenticate {
	Auth-Type PAP {
		pap
	}
	Auth-Type MS-CHAP {
		mschap {
			reject = 2
		}
		if (reject) {
			mschap_ad
		}
	}
	ntlm_auth
}

preacct {
	preprocess
	acct_unique
	suffix
}

accounting {
	unix
	radutmp
}

session {
	radutmp
}

post-auth {
}

pre-proxy {
}

post-proxy {
}

