Hi, > if ( User-Name =~ /.*@.*.unict.it$/ ) { > update control { > User-Name := "%{1}" > } > } urgh. you are writing User-Name in the control plane to the component before the realm.....but Stripped-User-Name will do that for you without any strange things or impacting EAP client behaviour. alan