Hello Alan, sorry, of course. Here we go (output anonymized): (0) Received Access-Request Id 55 from 192.168.100.1:44293 to 192.168.100.1:1812 length 88 (0) User-Name = "user0815@mydomain.de" (0) User-Password = "dXssVKeg1y" (0) NAS-IP-Address = 192.168.100.1 (0) NAS-Port = 1812 (0) Message-Authenticator = 0x40145430f48a2671d34951aa8ec22910 (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default (0) authorize { (0) preprocess: EXPAND ^([^@]+)@([[:alnum:].\-_]*)$ (0) preprocess: --> ^([^@]+)@([[:alnum:].\-_]*)$ (0) preprocess: hints: Matched DEFAULT at 53 (0) preprocess: EXPAND %{1} (0) preprocess: --> user0815 (0) preprocess: EXPAND %{2} (0) preprocess: --> mydomain.de (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "user0815", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> user0815@mydomain.de (0) sql: SQL-User-Name set to 'user0815@mydomain.de' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'user0815@mydomain.de' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'user0815@mydomain.de' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "dXssVKeg1y" (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'user0815@mydomain.de' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'user0815@mydomain.de' ORDER BY id (0) sql: User found in radreply table, merging reply items (0) sql: Framed-IP-Address = 10.20.30.233 (0) sql: Framed-IP-Netmask = 255.255.255.252 (0) sql: Framed-Route = "10.20.30.20 255.255.255.252" (0) sql: Cisco-AVPair = "lcp:interface-config=ip vrf forwarding MYVRF" (0) sql: Cisco-AVPair += "lcp:interface-config=ip address 10.20.30.234 255.255.255.252" (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'user0815@mydomain.de' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'user0815@mydomain.de' ORDER BY priority (0) sql: User found in the group table (0) sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (0) sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'speedaccess-dsl.de' ORDER BY id (0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'speedaccess-dsl.de' ORDER BY id rlm_sql (sql): Released connection (1) Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on radiussql.hlkomm.net via TCP/IP, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 (0) [sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) [pap] = updated (0) } # authorize = updated (0) Found Auth-Type = PAP (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (0) Auth-Type PAP { (0) pap: Login attempt with password (0) pap: Comparing with "known good" Cleartext-Password (0) pap: User authenticated successfully (0) [pap] = ok (0) } # Auth-Type PAP = ok (0) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default (0) post-auth { (0) update { (0) No attributes updated (0) } # update = noop (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (2) (0) sql: EXPAND %{User-Name} (0) sql: --> user0815@mydomain.de (0) sql: SQL-User-Name set to 'user0815@mydomain.de' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'user0815@mydomain.de', 'dXssVKeg1y', 'Access-Accept', '2018-09-03 19:30:18') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'user0815@mydomain.de', 'dXssVKeg1y', 'Access-Accept', '2018-09-03 19:30:18') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (2) (0) [sql] = ok (0) [exec] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # post-auth = ok (0) Sent Access-Accept Id 55 from 192.168.100.1:1812 to 192.168.100.1:44293 length 0 (0) Framed-IP-Address = 10.20.30.233 (0) Framed-IP-Netmask = 255.255.255.252 (0) Framed-Route = "10.20.30.20 255.255.255.252" (0) Cisco-AVPair = "lcp:interface-config=ip vrf forwarding MYVRF" (0) Cisco-AVPair = "lcp:interface-config=ip address 10.20.30.234 255.255.255.252" (0) Finished request Waking up in 4.9 seconds. (0) Cleaning up request packet ID 55 with timestamp +18 Ready to process requests