Hi, Yes this is why I started looking at the debugs to see what was happening and found the attribute rewrite issue where it says it cannot find the configuration token, if I take the Configuration token out of the radgroup reply it shows one, if I take the attrib-rewrites out it only shows one in the access accept packet.
So it looks like the Attrib rewrite is actually adding a second attrib rather than editing the original one, and thus the errors in the debug log. Does the radius give the resultant reply to attrib rewrite to check before sending it out, is there a way to programmatically display the reply attributes somehow, so I can see what the reply packet looks like before the attrib rewrite edits it, by maybe logging to a file or something Regards Keith Dovale -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Saturday, February 09, 2008 11:33 PM To: FreeRadius users mailing list Subject: Re: Newslists Hi, > Ok but then > > The thing about the attr_rewrite module is that it looks at ALL attributes > in the list. In this case, you have two Configuration-Tokens. One has > value "SHAPED_NORMAL", and the other "UNSHAPED_NORMAL". It doesn't match > the first, but it does match the second. After that, it says it couldn't > find any more. > > Where does it get the second Configuration-Token from ? well, from your debug I see this: Sending Access-Accept of id 195 to 196.43.1.92 port 1820 Framed-Protocol := PPP Configuration-Token := "SHAPED_NORMAL" Session-Timeout := 86340 Acct-Interim-Interval := 3600 Configuration-Token = "SHAPED_NORMAL" Reply-Message = "Your maximum monthly usage time has been reached" Proxy-State = 0x313030 there are 2 "Configuration-Token" attributes. possibly because it was added in an incorrect way, or adjusted/set incorrectly originally? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

