Ldap-Group AND EAP-TTLS/Ldap Question (Again)

Hi, Is there a way to use the Ldap-Group with EAP-TTLS authentication based on LDAP??? I’ve set it up in my users file but It doesn’t work as the group belonging is performed on the outer identity first … Can I some way specify to check the group only for the tunnelled identity? Benoît Bianchi. Ingénieur Système CRI / ISTY Université de Versailles Saint Quentin en Yvelines