Checkitems

Maybe my last question was unclear this morning. Therefore I would like to rephrase it: Checkitems may be defined via ldap.attrmap e.g. like: checkItem User-Category primaryGroupID Those items, retrieved from an ldapserver and thus not part of the request: Are they supposed to be accessible by following modules? In a case like this in radiusd.conf: authorize { ldap { notfound = return } files } Should the files module have access to to a check item User-Category ? Thanks Norbert Wegener