Hello again, eventually the solution for me is: --> MYSQL mysql> select * from radcheck where username = "prueba"; +-----+----------+--------------------+----+-------------+ | id | username | attribute | op | value | +-----+----------+--------------------+----+-------------+ | 228 | prueba | Cleartext-Password | := | prueba | | 227 | prueba | Expiration | := | 10 Jun 2010 | | 231 | prueba | Expiration-Init | := | 20100604 | +-----+----------+--------------------+----+-------------+ 3 rows in set (0.00 sec) mysql> select * from radreply where username = "prueba"; +-----+----------+--------------+----+---------------------+ | id | username | attribute | op | value | +-----+----------+--------------+----+---------------------+ +-----+----------+--------------+----+---------------------+ 0 rows in set (0.00 sec) --> /etc/freeradius/sites-enable/default authorize { ... switch "%{Realm}" { case 'temp.XXX.es' { sql if ("%D" < "%{control:Expiration-Init}"){ reject } } Thanks ____________________ Ana Gallardo Gómez ____________________