Re: username with sereral passwords. Which op value?

We just don't have enough information to make a decision. If the query returns id,Username,Attribute, op, value sorted by id, perhaps we could. If the attributes were san0001 Cleartext-Password := santi1 san0001 NAS-IP-Address == 123.123.123.123 san0001 Cleartext-Password := santi2 san0001 NAS-IP-Address == 234.234.234.234 It might make sense to have different passwords on different NAS boxes.

You can make adjusments for such a case. Extend radcheck schema with field for NAS-IP-Address and change radcheck query to include it's value. This does make sense. But a list of possible passwords for a single user ... Ivan Kalik Kalik Informatika ISP