Hi, > erm? so, the sections are used from down to top? *scratches head* no, IGNORE the modules seciton - that just configures the modules. LOOK at your config authorize { preprocess eap ldap } authenticate { eap Auth-Type LDAP { ldap } } here we can CLEARLY see that EAP is done before LDAP alan