Hello,

I am using an SQL backend.

The usernames are stored with the full username including a suffix ‘user@domain.com

I am trying to use TTLS/PEAP with MSCHAPV2

So I want freeradius to authenticate the full username, not the stripped username.

I want it to match ‘user@domain.com’ not  ‘user’

When trying to authenticate, it says:

[mschap] ERROR: User-Name (user@domain.com) is not the same as MS-CHAP Name (user) from EAP-MSCHAPv2.

If I set the username in the database to just ‘user’ and send that through in the supplicant, it works.

But I want it to work with the full username including the suffix in the database.

Is this possible?

Thanks for your help

Dean.