Thanks Alan,

I tested with this but it won't works in Post-Auth Reject section in inner-tunnel
I can't update reply-Message called in default virtual server, it is empty.
Actually, the only way that I have is to enable logging in the two virtual servers, but I have two lines in logs for 1 reject.

Nicolas.

nicolas.clo@ricoh-industrie.fr wrote:
> The problem is that I have two lines of  logs errors, one with the good
> reply message and one with nothing because the module sql is present in
> inner-tunnel (Post-Auth-Type REJECT)  and default server
>  (Post-Auth-Type REJECT  )
> I would like to know is there a way to copy Reply-Message in
> inner-tunnel to Reply-Message in default virtual server  in disable the
> module sql in  inner-tunnel (Post-Auth-Type REJECT section ).

$ man unlang

update outer.reply {
Reply-Message := "%{reply:Reply-Message}"
}

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html