Le 15/03/2013 12:00, freeradius-users-request@lists.freeradius.org a écrit :

hi,

add 'preprocess' to top of your authorize section in inner-tunnel ?

alan

Thanks Alan, it works . Couldn't it be a default behavior ? I'm doing migration from FR 1.x and user-password had the syntax user-password == "password" . I'm wondering why the syntax is now with := ? the http://freeradius.org/radiusd/man/users.html says : Attribute := Value Always matches as a check item, and replaces in the configuration items any attribute of the same name. If no attribute of that name appears in the request, then this attribute is added. As a reply item, it has an identical meaning, but for the reply items, instead of the request items. Attribute == Value As a check item, it matches if the named attribute is present in the request, AND has the given value. Not allowed as a reply item. Bertrand