For the "case" problem, I RTFM ...: acl administrator proxy_auth -i administrator@test.local For the realm, I can use the proxy_auth_regex, but it would be really easier if there is a way to really strip the realm part. acl administrator proxy_auth_regex -i ^(administrator|foo)(@.*)?$ to allow either "administrator" or "foo", using basic auth or kerberos auth.
