>What I cannot achieve is: > > >- Freeradius must proxy to request to a token server but only when it authenticated the user successfully. > No. Your client should send another request to token server once it gets Access-Accept from radius server. Ivan Kalik Kalik Informatika ISP