force/require @domain/part

[lejeczek]

hi users,

I'm hoping this is possible, having pretty vanilla mschap & 
pap(ntlm) to tweak radius so it - for eap & pap (basically 
AD) - would fail if there is no @domain part in the request.

Like when AD domain is @private.dom.my / PRIVATE and radius 
will absolutely need this. At the moment having configs 
constructed of bits from wikis/howtos, both: 
"me at private.dom.my" and "me" get authenticated.

how to tweak?

many thanks,

L