Hello, I'm fairly new to freeradius so to some my problem may seem trivial, but ... I'm trying to get EAP-TLS to work, and when using "file" setup everything works as it's suppose to - only selected users can authorize after meeteing check criteria. When i switch to SQL (postgresql) it seems that no matter what i insert to radcheck and radreply tables *any user (if he has valid cert) can authorize without any problems* :-( Can anybody shed some light on this issue ? My configuration: ### USERS ### "ajax" Auth-Type := EAP, Calling-Station-Id == "some-valid-mac" # "ajax" Auth-Type := EAP, Calling-Station-Id == "some-invalid-mac" DEFAULT Auth-Type := Reject Reply-Message = "ACCESS DENIED" ### SQL ### radius=> select * from radcheck; id | username | attribute | op | value -----+----------+--------------------+----+--------------- 410 | ajax | Auth-Type | := | EAP 411 | ajax | Calling-Station-ID | == | some-INVALID-mac 412 | DEFAULT | Auth-Type | := | Reject (3 rows) radius=> select * from radreply; id | username | attribute | op | value ----+----------+---------------+----+--------------- 3 | DEFAULT | Reply-Message | = | ACCESS DENIED (1 row) All other tables are _empty_ ### postgresql.conf ### Is a default postgresql.conf from freeradius (with database connection settings set) ### radiusd.conf ### authorize { preprocess suffix eap sql # files } authenticate { eap } -- best regards, Marcin 'Yans' Bazarnik