Alan, this part of configration in default's authorize section make freeradis sigsegv: if (EAP-Message) { if ( Called-Station-ID =~ /.*:eduroam$/ ) { if ( User-Name =~ /.*@.*.unict.it$/ ) { update control { User-Name := "%{1}" } } if ( SQL-Group == studente ) { reject update reply { Reply-Message = "Eduroam access for students allowed only if you are outside UniCT campus" } } } if ( Called-Station-ID =~ /.*:WLUCT$/ ) { if ( SQL-Group != wireless ) { reject } update reply { Reply-Message = "WLUCT" } } if ( Called-Station-ID =~ /.*:WLUCTSTUD$/ ) { if ( SQL-Group != studente ) { reject } update reply { Reply-Message = "WLUCTSTUD" } } } The remaining config is nearly the default one. Luca