Freeradius says TRUE, but REJECTS the user anyway: # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[logintime] returns noop sql_xlat expand: %{User-Name} -> ieva sql_set_user escaped user --> 'ieva' expand: select start_time from resv where username='%{User-Name}' -> select start_time from resv where username='ieva' rlm_sql (sql): Reserving sql socket id: 3 sql_xlat finished rlm_sql (sql): Released sql socket id: 3 expand: %{sql:select start_time from resv where username='%{User-Name}'} -> 1337038200 sql_xlat expand: %{User-Name} -> ieva sql_set_user escaped user --> 'ieva' expand: select end_time from resv where username='%{User-Name}' -> select end_time from resv where username='ieva' rlm_sql (sql): Reserving sql socket id: 2 sql_xlat finished rlm_sql (sql): Released sql socket id: 2 expand: %{sql:select end_time from resv where username='%{User-Name}'} -> 1337020200 expand: %l -> 1337010053 ++[request] returns noop ++? if (Resv-Cur-Time < "%{Resv-Start-Time}") expand: %{Resv-Start-Time} -> 1337038200 ? Evaluating (Resv-Cur-Time < "%{Resv-Start-Time}") -> TRUE ++? if (Resv-Cur-Time < "%{Resv-Start-Time}") -> TRUE ++- entering if (Resv-Cur-Time < "%{Resv-Start-Time}") {...} +++[reject] returns reject ++- if (Resv-Cur-Time < "%{Resv-Start-Time}") returns reject Using Post-Auth-Type Reject -- View this message in context: http://freeradius.1045715.n5.nabble.com/Unix-TimeStamp-Based-Login-tp5708187... Sent from the FreeRadius - User mailing list archive at Nabble.com.