Hi Phil, Thank you for the reply. Yes I am running 2.1.10 I have made the changes you proposed and I see in the debug: Tue Jun 14 10:12:46 2011 : Info: ++- entering if (User-Name =~ /^([^@]*)@(.+)$/) {...} Tue Jun 14 10:12:46 2011 : Info: expand: %{1} -> jroldan Tue Jun 14 10:12:46 2011 : Info: expand: %{2} -> irta.es Tue Jun 14 10:12:46 2011 : Info: expand: %{toupper:%{2}} -> IRTA.ES How the expand is done. But I still can not authenticate with user@domain format. I attach you the radius output: http://freeradius.1045715.n5.nabble.com/file/n4487147/radius-Xx.txt radius-Xx.txt a good auth with nt format: http://freeradius.1045715.n5.nabble.com/file/n4487147/auth_ok_nt_format.txt auth_ok_nt_format.txt a bad auth with "email" format: http://freeradius.1045715.n5.nabble.com/file/n4487147/auth_no_ok_mail_format... auth_no_ok_mail_format.txt Thank you very much for your support. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Credentials-format-in-Windows-suplic... Sent from the FreeRadius - User mailing list archive at Nabble.com.