Hi group. I have a freeradius 2.2.5 in a debian 8 box with an OpenLdap database. A simple query: angel.elena@bulma:/etc/freeradius$ radtest angel.elena password localhost:1812 0 testing123 Sending Access-Request of id 100 to 127.0.0.1 port 1812 User-Name = "angel.elena" User-Password = "password" NAS-IP-Address = 1.1.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, length=47 Mikrotik-Group = "AAA_ADMIN" Mikrotik group is a mapped attribute in a ldap.attrmap file and works fine: replyItem Mikrotik-Group radiusGroupName for a new setup and to not modify all devices, we need specify two radiusGroupName / Mikrotik-Group in every query, ex: Mikrotik-Group = "AAA_ADMIN" Mikrotik-Group = "AAA_CORES" Is possible specify two radiusGroupName in a simple reply or any idea to set this setup ? Thanks. -------------------------------- Ángel Elena Medina _o) craem@craem.net / \\ http://blog.craem.net _(___V @craem_ www.linkedin.com/in/angel-elena-medina -------------------------------- Zarafa Webapp.