about "freeradius accepts anybody"

[Ivan Kalik]

>"AUTENTICACIÓN" is a suffix of user-name, but only for those 
>certificates that are subordinated to FNMT ca. "NOMBRE" is a prefix of 
>user-name which have DNIe, subordinated to another ca. I want to 
>configure two virtual servers  based on this details, if I can.

OK. I had a look and found out that these are not really user
certificates but electronic ID cards.

Since you won't know which of the two authorities issued an ID card for
your user (they probably could have both and use one today and another
one tomorrow), you should duplicate your filtering user entries in users
file: one with prefix, one with suffix.

You should have several hunderd user entries in users file so doubling
them will have very little impact on performance. But for every change
to users file you will need to restart the server (AFAIK HUP-ing is
still not recommended).

Ivan Kalik
Kalik Informatika ISP