On Aug 5, 2021, at 7:43 AM, Nazar Tareyev <nazzartareev@gmail.com> wrote:

Thank you. I have declared our domain in proxy.conf, then uncommented ntdomain in default site and now it seems that stripping domain from username works. Regarding EAP error, I will dig into it deeper. But interestingly, when you manually enter just username, without domain, no such error appears and authentication is successful. EAP error only comes up when you enter DOMAIN\Username

The error is coming from the EAP client. So there is nothing you can change in FreeRADIUS to fix this. Alan DeKok.