Hi, I can confirm that today's GIT does what it's supposed to in terms of Access-Reject/Accept :-) There is still something strange (but probably unrelated) which I see in debug mode: (2) pap : Passwords don't match (2) [pap] = reject (2) } # Auth-Type PAP = reject (2) Failed to authenticate the user. (2) Using Post-Auth-Type Reject (2) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. Sending Access-Reject Id 38 from 127.0.0.1:1812 to 127.0.0.1:55939 (this happens both when proxy-to-vserver, or when just running through unproxied) I'm a bit worried about that - the dictionaries are auto-loaded, and they contain "Reject" as a value of Post-Auth-Type just fine. So why is this not found? And, more importantly, if my post-auth section has something to do inside Post-Auth-Type Reject: will these config items actually get executed? Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66