Lorenzo Milesi wrote:

I know it's a stupid question but so far I couldn't manage to dig it out.

The answer should be in the debug output.

I'm using FR2 with MySQL backend. All my users belong to one or more group. I usually set the Idle-Timeout attribute using the radgroupreply table, and it works great. For a minority of users I'd like to override this attribute to a different value, but I cannot have FR reply as I wish.

Current situation: Radcheck: USERA MD5-Password := somemd5hash Radusergroup: USERA c_gvt 30 Radgroupreply c_gvt Idle-Timeout := 3800

This works fine and replies 3800.

OK.

If I add

USERA Idle-Timeout := 100

to radreply it will still reply 3800.

Because the radusergroup checks are done AFTER the radreply checks. This is visible in the debug output.

Then I checked manpage of USERS [1] so I changed:

Radreply: USERA Idle-Timeout := 100 Radgroupreply c_gvt Idle-Timeout = 3800

but the reply is always the same. What am I missing?

That should work. What does the debug output say? Alan DeKok.