> > > This time I used: > > > > |298|[email protected]|MD5-Password | := | password > > |313|[email protected]|Calling-Station-Id | =~ | 6480342|555555 > > > > and it still accepts the user from regardless of the phone number it's > using. this is what comes up > > in the debug. > > [..] > > > [sql] sql_set_user escaped user --> '[email protected]' > > rlm_sql (sql): Reserving sql socket id: 3 > > expand: SELECT id, username, attribute, value, op > FROM > > radcheck WHERE username = '%{SQL-User-Name}' ORDER > > BY id -> SELECT id, username, attribute, value, op FROM > > radcheck WHERE username = '[email protected]' > > ORDER BY id > > expand: %{Calling-Station-Id} -> 72061490 > > [sql] User found in radcheck table > > I do not understand this. It can't happen if what you've got in the > database is what you tell us above. > > > Bjørn >
Try removing the radreply entry with auth-type := accept. Won't that allow the user in regardless of the check items? Ben - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

