# User Auth Log and Login Errors

*Log → User Auth Log* ("Users Authentication Log") shows the latest login attempts of your users and the answer of SAS Radius. It is the first place to look when a user says "I can't connect".

[![user auth log](https://help.snono-systems.com/uploads/images/gallery/2026-11/scaled-1680-/user-auth-log.png)](https://help.snono-systems.com/uploads/images/gallery/2026-11/user-auth-log.png)

- Columns: **Date, Username, Server Reply, NAS, MAC**.
- The **Search** box finds a username.
- The log keeps only the **most recent** attempts (on busy servers, only the last minutes). For older events use the [Sessions Report](https://help.snono-systems.com/books/sas-radius/page/sessions-report) or the [RADIUS Log](https://help.snono-systems.com/books/sas-radius/page/radius-log).

## Server replies and how to fix them

Depending on the case, the reply is shown as a code (for example `over_expiration`) or as text (for example *user expired*).

<table id="bkmrk-replymeaningfix-acce"><thead><tr><th>Reply</th><th>Meaning</th><th>Fix</th></tr></thead><tbody><tr><td>Access-Accept / user authenticated successfully</td><td>Login accepted.</td><td>–</td></tr><tr><td>Access-Reject (without another reason)</td><td>Wrong password, or the username doesn't exist.</td><td>Check the password and username on the user's router. If username case sensitivity is enabled in Settings, check upper/lower case.</td></tr><tr><td>user\_not\_found / user not found</td><td>No user with this username.</td><td>Create the user or correct the username.</td></tr><tr><td>nas\_not\_found / nas not found</td><td>The router is not in the NAS list.</td><td>Add the NAS with the correct IP address.</td></tr><tr><td>user\_disabled / user disabled</td><td>The user is disabled.</td><td>Enable the user.</td></tr><tr><td>profile disabled</td><td>The user's profile is disabled.</td><td>Enable the profile or change the user's profile.</td></tr><tr><td>over\_expiration / user expired</td><td>The subscription has expired.</td><td>Activate or extend the user. To let expired users connect with limited access, see *Setting Up Expired Users* (Profiles chapter).</td></tr><tr><td>user\_exceeded\_download\_limit / upload / traffic / uptime</td><td>The traffic or time quota is used up.</td><td>Renew, add traffic, sell an extension, or set a Quota Next Profile (FUP).</td></tr><tr><td>user\_exceeded\_daily\_… / user exceeded allowed daily traffic limit</td><td>The daily limit is reached.</td><td>Wait until tomorrow, use Reset Traffic, or set a Daily Limit Next Profile.</td></tr><tr><td>exceeded\_max\_sessions / User exceeded max login sessions</td><td>The user already has as many open sessions as allowed. Often an old session that was not closed (router reboot, lost accounting).</td><td>Wait for the idle timeout or disconnect the old session; check that accounting works on the router; raise Simultaneous Sessions if needed.</td></tr><tr><td>invalid\_mac / trying to log using invalid MAC</td><td>MAC Lock is on and the device MAC isn't allowed (often a new router).</td><td>Add the new MAC to Allowed MACs or turn off MAC Lock.</td></tr><tr><td>manager\_nas\_restriction</td><td>The user's manager is not allowed on this router (Allowed NAS(s)).</td><td>Add the NAS to the manager's Allowed NAS(s).</td></tr><tr><td>invalid\_ppp\_service</td><td>The PPPoE service name isn't in the manager's Allowed PPP Services.</td><td>Add the exact service name.</td></tr><tr><td>invalid\_site\_ppp\_service</td><td>The PPPoE service isn't allowed for the user's site.</td><td>Fix the site's allowed services (watch for extra spaces).</td></tr><tr><td>ppp service required / hotspot service required</td><td>The profile allows only PPP, or only Hotspot.</td><td>Change the profile's Allowed Services, or connect with the right service.</td></tr><tr><td>user\_overdue\_invoices / User has overdue invoices</td><td>Postpaid user with an unpaid invoice past the grace period.</td><td>Pay the invoice, or check the Postpaid &amp; Billing Settings.</td></tr><tr><td>Exceeded license users limit</td><td>More users than your license allows.</td><td>Delete unused users or upgrade the license.</td></tr><tr><td>license inactive</td><td>The license is not active.</td><td>Check *Settings → License* and contact Snono support.</td></tr></tbody></table>

Managers see the attempts of their own users. Attempts with unknown usernames are visible to system administrators.

*Required permission: Report - Auth Log (Dialup)*