I suppose to have sort out this……but I want reject user "paolo" when coming from airespace-wlan-id = 5 radcheck 9 paolo Expiration := 15 May 2012 8 paolo Cleartext-Password := paolo radusergroup paolo rfxguest 0 radgroupcheck 4 rfxguest Airespace-Wlan-Id := 5 radgoupreply 1 rfxguest Auth-Type := Reject radius -X …. Module: Instantiating module "sql" from file /usr/local/etc/raddb/sql.conf sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "radius" password = "xxxxxx" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" readclients = no deletestalesessions = yes num_sql_socks = 5 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}" ….. [peap] Using saved attributes from the original Access-Accept Auth-Type := Reject Session-Timeout = 48445 User-Name = "paolo" [eap] Freeing handler ++[eap] returns ok Login OK: [paolo] (from client private-network-1 port 1 cli 00-24-36-b6-3a-22) EAP-PEAP tunnel reply attribute return Auth-Type = Reject but paolo is authenticated. Any details to look into to debug this ? Thanks fro any reply, Paolo. ------------------------------------------------------------------------------------------------ Paolo Barbato Consorzio RFX corso Stati Uniti,4 35127 Padova - Italy Network Administrator phone: +39 049 8295097 fax: +39 049 8700718 ------------------------------------------------------------------------------------------------