My Post-Auth Section (in sites-enabled)

post_auth { Post-Auth-Type REJECT { update reply { Cisco-AVPair !* ANY } attr_filter.access_reject }

Aaaargh => post_auth doesn't exist, should be post-auth Now everything is working fine ... post-auth { Post-Auth-Type REJECT { update reply { Cisco-AVPair !* ANY } attr_filter.access_reject }