hi, another thing you will have to change is either 1) configure the PCs to NOT log in using their username and password - then they login via the supplicant instead 2) use rlm_attr_rewrite to strip any thing that starts with blablah\ alan