Hi,
> erm? so, the sections are used from down to top? *scratches head*
no, IGNORE the modules seciton - that just configures the modules.
LOOK at your config
authorize {
        preprocess
        eap
        ldap
}
authenticate {
        eap
        Auth-Type LDAP {
                ldap
        }
}
here we can CLEARLY see that EAP is done before LDAP
alan