Hi List, FreeRADIUS Version 2.1.12 It has been brought to my attention that my FreeRadius servers are responding to proxied requests from eduroam without the suffix portion of the user name. This is causing accounting issues for other institutions. In inner-tunnel, I have tried to add: post-auth { update outer.reply { User-Name = "%{request:User-Name}" } } I also have use_tunneled_reply = yes in eap.conf I see the Access-Accept messages going out, without the suffix: Sending Access-Accept of id 62 to 142.231.112.1 port 53243 MS-MPPE-Recv-Key = 0xd720476081b3ec7b8f7529a32f4c2c06f786a2c39aa888c7f157784db7673b47 MS-MPPE-Send-Key = 0x593de7fcae5ba512dec5d348b4500dea9ba73044c2c68ee661f7214a073377dd EAP-Message = 0x030b0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "user1" Proxy-State = 0x4f53432d457874656e6465642d49643d3138323338 What I want to see is: Sending Access-Accept of id 62 to 142.231.112.1 port 53243 MS-MPPE-Recv-Key = 0xd720476081b3ec7b8f7529a32f4c2c06f786a2c39aa888c7f157784db7673b47 MS-MPPE-Send-Key = 0x593de7fcae5ba512dec5d348b4500dea9ba73044c2c68ee661f7214a073377dd EAP-Message = 0x030b0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "user1@realm.com" Proxy-State = 0x4f53432d457874656e6465642d49643d3138323338 What am I missing? Thanks, Dave