buried in unlang docs etc - you need to handle the fail and try another eg something like sql { fail = 1 } mschap { fail = 1 } if (fail) { reject }