Condition:
1. I have a local realm (suffix), xyz.com. I'm using freeradius 2.1.3+mysql.
2. My own user's username in mysql radcheck table is store in username@xyz.com format
3. A person want me to proxy his prefix ABC/his-customer-username@myrealm to his radius server, i.e: ABC/his-customer-username@xyz.com
That is wrong. His customers should use ABC/his-customer-username only, not have @xyz.com as well.
4. The proxy has strip both prefix and suffix, which means when ABC/his-customer-username@xyz.com auth request come in, i have to forward only his-customer-username to his radius.
If you don't have to deal with @xyz.com at the end it works by default. Change instructions for his users. They shouldn't append your domain as well. Only his prefix. Ivan Kalik Kalik Informatika ISP