Hello everyone,

I have met a situation that, I have to give a usergroup which has same suffix such as "@abc" to use same password and same authentication method, and they need same destination, here is L2tp tunnel, such as:
Tunnel-Type = 3,
Tunnel-Medium-Type = 1,
Tunnel-Server-Endpoint = “172.168.10.15”,
Tunnel-Private-Group-ID = “default”,
Tunnel-Assignment-ID = public
Is there anyone knowes that does freeradius support this kind of operation? Or is there any way to modify the source code to get the target?

Thank you for your help.

Hi, thanks for your viewing of my question. I have found the way of doing this. It's such an easy thing.
Just edit the "hints" configuration file under path /etc/raddb/ use regex to realm username, like this:
DEFAULT User-Name =~ "^[^@]+@(.+$)"
User-Name := "%{1}"
This tells the freeradius to rewrite the username matchs the pattern to the realm of the second part.
or you can limit the domains:
DEFAULT User-Name =~ "^[^@]+@(domain1|domain2)"
User-Name := "%{1}"
This means two usernames "domain1", "domain2".

After that, you can write user authentication and reply information in "users" file(or "radcheck" and "radreply" database table), with username the rewrited username by the realm.

Thanks Brad and Chris from katalix for helping.