AD Group based ldap auth

I'm trying to get group based authentication working using LDAP against AD. Right now I'm getting a failure related to the group search filter. What filter should I be using? groupmembership_filter = "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=top)(uniq uemember=%{Ldap-UserDn})))" Looking at the howto here http://lists.cistron.nl/pipermail/freeradius-users/2005-November/048536. html got me part of the way. Anyone out there doing group based auth against AD mind sharing their config? Thanks, Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035