Hi, I don't know why my radius does the following: my freeradius-server (1.1.7) retrieves the username from the local db AFTER "Found realm "DEFAULT". Then the query was send to the correct radius. Thanks Hans Debug: ....... Processing the authorize section of radiusd.conf modcall: entering group authorize for request 50 modcall[authorize]: module "preprocess" returns ok for request 50 modcall[authorize]: module "chap" returns noop for request 50 modcall[authorize]: module "mschap" returns noop for request 50 rlm_realm: Looking up realm "dfn.de" for User-Name = "bornemann@dfn.de" rlm_realm: Found realm "DEFAULT" rlm_realm: Proxying request from user bornemann to realm DEFAULT rlm_realm: Adding Realm = "DEFAULT" rlm_realm: Preparing to proxy authentication request to realm "DEFAULT" modcall[authorize]: module "suffix" returns updated for request 50 rlm_eap: Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. modcall[authorize]: module "eap" returns noop for request 50 radius_xlat: 'bornemann@dfn.de' rlm_sql (sql): sql_set_user escaped user --> 'bornemann@dfn.de' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'bornemann@dfn.de' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): User bornemann@dfn.de not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bornemann@dfn.de' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'bornemann@dfn.de' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): User bornemann@dfn.de not found in radgroupcheck rlm_sql (sql): Released sql socket id: 1 rlm_sql (sql): User not found modcall[authorize]: module "sql" returns notfound for request 50 modcall[authorize]: module "pap" returns noop for request 50 modcall: leaving group authorize (returns updated) for request 50 Sending Access-Request of id 0 to 123.123.123.123 port 1812 ... -- Hans Bornemann Universitaet Dortmund - ITMC Tel. ++49 231 755 2132 Fax. ++49 231 755 2731