Hi Team, I need a little help because I am trying to configure a FreeRadius 3. With the previous FR version (2.2.5) everything work fine and I was able to authenticate my LDAP'users. Now I am trying to replicate my configuration but I receive this error: Debug error: Ready to process requests (2) Received Access-Request Id 122 from 127.0.0.1:38214 to 127.0.0.1:1812 length 78 (2) User-Name = "somanath" (2) User-Password = "password" (2) NAS-IP-Address = 127.0.1.1 (2) NAS-Port = 1812 (2) Message-Authenticator = 0xab2bb69bcb4b9d1512bdce6024e1cdef (2) # Executing section authorize from file /etc/freeradius/sites-enabled/default (2) authorize { (2) policy filter_username { (2) if (&User-Name) { (2) if (&User-Name) -> TRUE (2) if (&User-Name) { (2) if (&User-Name =~ / /) { (2) if (&User-Name =~ / /) -> FALSE (2) if (&User-Name =~ /@[^@]*@/ ) { (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (2) if (&User-Name =~ /\.\./ ) { (2) if (&User-Name =~ /\.\./ ) -> FALSE (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE (2) if (&User-Name =~ /\.$/) { (2) if (&User-Name =~ /\.$/) -> FALSE (2) if (&User-Name =~ /@\./) { (2) if (&User-Name =~ /@\./) -> FALSE (2) } # if (&User-Name) = notfound (2) } # policy filter_username = notfound (2) [preprocess] = ok (2) [chap] = noop (2) [mschap] = noop (2) [digest] = noop (2) suffix: Checking for suffix after "@" (2) suffix: No '@' in User-Name = "somanath", looking up realm NULL (2) suffix: No such realm "NULL" (2) [suffix] = noop (2) eap: No EAP-Message, not doing EAP (2) [eap] = noop (2) [files] = noop (2) sql: EXPAND %{User-Name} (2) sql: --> somanath (2) sql: SQL-User-Name set to 'somanath' rlm_sql (sql): Closing connection (7): Hit idle_timeout, was idle for 64 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): Closing connection (8): Hit idle_timeout, was idle for 64 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): Closing connection (6): Hit idle_timeout, was idle for 64 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): 0 of 0 connections in use. You may need to increase "spare" rlm_sql (sql): Opening additional connection (9), 1 of 32 pending slots used rlm_sql (sql): Reserved connection (9) (2) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (2) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'somanath' ORDER BY id (2) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'somanath' ORDER BY id (2) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (2) sql: --> SELECT groupname FROM radusergroup WHERE username = 'somanath' ORDER BY priority (2) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'somanath' ORDER BY priority (2) sql: User not found in any groups rlm_sql (sql): Released connection (9) Need 2 more connections to reach min connections (3) rlm_sql (sql): Opening additional connection (10), 1 of 31 pending slots used (2) [sql] = notfound (2) [expiration] = noop (2) [logintime] = noop (2) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (2) pap: WARNING: Authentication will fail unless a "known good" password is available (2) [pap] = noop (2) } # authorize = ok (2) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (2) Failed to authenticate the user (2) Using Post-Auth-Type Reject (2) # Executing group from file /etc/freeradius/sites-enabled/default (2) Post-Auth-Type REJECT { (2) sql: EXPAND .query (2) sql: --> .query (2) sql: Using query template 'query' rlm_sql (sql): Reserved connection (9) (2) sql: EXPAND %{User-Name} (2) sql: --> somanath (2) sql: SQL-User-Name set to 'somanath' (2) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (2) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'somanath', 'password', 'Access-Reject', '2018-04-26 12:30:51') (2) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'somanath', 'password', 'Access-Reject', '2018-04-26 12:30:51') (2) sql: SQL query returned: success (2) sql: 1 record(s) updated rlm_sql (sql): Released connection (9) (2) [sql] = ok (2) attr_filter.access_reject: EXPAND %{User-Name} (2) attr_filter.access_reject: --> somanath (2) attr_filter.access_reject: Matched entry DEFAULT at line 11 (2) [attr_filter.access_reject] = updated (2) [eap] = noop (2) policy remove_reply_message_if_eap { (2) if (&reply:EAP-Message && &reply:Reply-Message) { (2) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (2) else { (2) [noop] = noop (2) } # else = noop (2) } # policy remove_reply_message_if_eap = noop (2) } # Post-Auth-Type REJECT = updated (2) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (2) Sending delayed response (2) Sent Access-Reject Id 122 from 127.0.0.1:1812 to 127.0.0.1:38214 length 20 Waking up in 3.9 seconds. (2) Cleaning up request packet ID 122 with timestamp +363 What did I make mistake or miss? Many thanks in advance for your help.