Hi I have a question. How can I send attributes(for example reply-message, cvpn3000, ...) in access-reject packet. I tried to put my exec to the post-auth section Post-Auth-Type REJECT{}, but in this section radius dosen't send the attribs in the reject packet. Radius send only if i run the exec program in the files modul: DEFAULT NAS-Port-Type == "Virtual", Autz-Type = "LDAP" exec-program-wait ="/usr/local/etc/raddb/scripts/vpn.php" debug: Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated ++? if (NAS-Port-Type=="Virtual") ? Evaluating (NAS-Port-Type=="Virtual") -> TRUE ++? if (NAS-Port-Type=="Virtual") -> TRUE ++- entering if (NAS-Port-Type=="Virtual") {...} [script-bad] expand: %{User-Name} -> test [sctipt-bad] expand: %{User-Password} -> test Exec-Program output: CVPN3000-IPSec-Banner2 = 'sorry', Exec-Program-Wait: value-pairs: CVPN3000-IPSec-Banner2 = 'sorry', Exec-Program: returned: 0 +++[script-bad] returns ok ++- if (NAS-Port-Type=="Virtual") returns ok Delaying reject of request 7 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 7 Sending Access-Reject of id 79 to 192.168.1.1 port 1147 Waking up in 4.9 seconds. Cleaning up request 7 ID 79 with timestamp +388 Ready to process requests. what is wrong? what is the solution? thank you! br Gabor