Yes. You are right. If I use hhe@xjtu.cn, it will work.
 
If I use old freeRADIUS-1.1.6, username "hhe" can work well.  I think it is because I set default domain name "xjtu" in mschap module (ntlm_auth) .  But freeRADIUS-2.1.9 could not work without domain. 
 
----
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain:-xjtu} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"


--- 10年7月2日,周五, Alan DeKok <aland@deployingradius.com> 写道:

发件人: Alan DeKok <aland@deployingradius.com>
主题: Re: ntlm_auth fails for none domain
收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
日期: 2010年7月2日,周五,下午3:45

John wrote:
> Hi,
> It is the whole debug info. I think the problem is we could not get the
> default domain name "xjtu".

  Because the username does not include the domain.

  Log in with "hhe@xjtu.cn", and it will work.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html