Ok been fiddling some more. What I need to now do is work out which group a user belongs to based on LDAP users and groups. I am assuming this is in the radius.conf @ the section about groups. For Example, This LDAP user. # belld, people, dxi.net dn: uid=belld,ou=people,dc=dxi,dc=net cn: David Bell gidNumber: 100 givenName: David homeDirectory: /home/belld loginShell: /bin/bash objectClass: top objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson shadowInactive: -1 shadowMax: 99999 shadowMin: 0 shadowWarning: 7 sn: Bell uid: belld uidNumber: 1000 shadowLastChange: 13920 is a member of this LDAP group # Engineering, group, dxi.net dn: cn=Engineering,ou=group,dc=dxi,dc=net cn: Engineering gidNumber: 1000 member: uid=belld,ou=people,dc=dxi,dc=net objectClass: top objectClass: posixGroup objectClass: groupOfNames How do I do this, so that I can then have my users file grant Cisco-AVPair information based on group membership Thanks David