freeradius comes with a canonicalisation filter that will covert that User-Name to the reduced format. check the policy.d directory, read the filter than call it where needed in your config (authorize I guess) :) alan