a few pointers to provide a better service for end users
firstly, ensure you have a policy in place on the RADIUS server to ensure that any local authentications MUST have a realm defined.
ie 'if SSID = eduroam , then User-Name must have @'
(this can be done in FreeRADIUS using unlang, in RADIATOR using a Handler or PERL hook, and ACS/NPS in the policy section)
what does this achieve/fix? read on...
