hi, ..as there seems to be some doubts about how your system is actually working for non-EAP methods (ie whether or not you actually use SQL at all.....) it would be best if you actually sent the 'radiusd -X' output for when a successful authentication occurs. alan