i have the below in authorize sql { notfound = 1 reject = 2 } if (notfound) { update reply { Reply-Message := "Incorrect Username or Password" } reject } if (reject) { update reply { Reply-Message := "Your account is disabled, contact admin" } reject } expiration { userlock = 1 } if (userlock) { update reply { Reply-Message := "Your account has expired, contact admin" } reject } logintime pap but the reject response is never generated from the sql module, if the username doesnt match it generates the notfound and if password doesnt match the pap module rejects the request and sql responds ok but what i want is the sql module to generate the reject response. can anyone guide me under what circumstances does the sql module generate a reject response coz i tried setting Auth-Type attribute to reject but still sql doesnt generate reject