Hi again, Sorry if this message gets doubled. I thought it had not been sent. I have been testing with the definition of DEFAULT Auth-Type := Reject in users file, but does not works. I don't know if I should to define this into another directive or in another file or in sql table. Now, I'm thinking in to define radgroupcheck's attributes directly into radcheck table and the same with radgroupreply's attributes because, I'm interested in reject a user if doesn't correspond with its group's attributes. Is this really the way to achieve this? Thanks and regards, Toni. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Rejecting-login-with-radgroupcheck-a... Sent from the FreeRadius - User mailing list archive at Nabble.com.