Does freeradius offer authorization as well. I am trying to use the filter-id attribute. -----Original Message----- From: freeradius-users-bounces+tripp=dmenet.com@lists.freeradius.org [mailto:freeradius-users-bounces+tripp=dmenet.com@lists.freeradius.org] On Behalf Of Zoltan Ori Sent: Wednesday, January 18, 2006 11:08 AM To: FreeRadius users mailing list Subject: Re: CIsco Pix and FreeRadius.... On Wednesday 18 January 2006 09:40, Sills, Tripp wrote:

users: Matched entry DEFAULT at line 179 users: Matched entry DEFAULT at line 191

From the users file you can read: # If you are not sure why a particular reply is being sent by the # server, then run the server in debugging mode (radiusd -X), and # you will see which entries in this file are matched. # # When an authentication request is received from the comm server, # these values are tested. Only the first match is used unless the # "Fall-Through" variable is set to "Yes". # # A special user named "DEFAULT" matches on all usernames. # You can have several DEFAULT entries. All entries are processed # in the order they appear in this file. The first entry that # matches the login-request will stop processing unless you use # the Fall-Through variable.

You aren't matching tripp. Put your entries at the top or comment out all the DEFAULT entries you don't care about. Zoltan Ori - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html