Craig Schurr wrote: > If I understand correctly the following request should be denied because > the NAS-Identifier in the request doesn't match the one specified in the > groupcheck table. No. Read doc/rlm_sql. The Wiki also has a copy of that page. Alan DeKok.