>See in debug output a valid user with valid password comes from wrong >NAS-IP-Address which does not belong to check attributes of the user's group > >++[sql] returns ok
That is wrong. If group check fails sql should return notfound. Check your sql entries again. Have you altered default sql queries in some way (you have left them out of the debug)? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html