I have a BMAS radius authenticating users to a Cisco PIX firewall forInternet access. This process works fine for short periods of time
and then
users begin reporting that they have to try logging in several times
before
they are authenticated. The radius debug screen on the server will at
this
point be denying somewhere around half of the requests it receives
with the
error (access rejected <username> no more search domain). If I unload
and
reload radius.nlm, the problem goes away for a period of time.

Any Ideas

As a side question, looking forward which is a better radius
implementation
BMAS or NMAS