Dear all, I'm in process migrating from FR 1.1.X to FR 2.0.5 but stuck with Ldap-Group using unlang. I'm trying to convert below line in users file to unlang in authorize section.. but it's not working.. Using FreeBSD 7.0. users:- ====== DEFAULT Called-Station-Id == "Y5", ldapmain1-Ldap-Group == "TEST", Autz-Type := Y5 authorize:- =========== Trying a few as below but not working... i) if ( ldapmain1-Ldap-Group == "TEST" ) { ii) if ( control:ldapmain1-Ldap-Group == "TEST" ) { iii) if ( "%{ldapmain1-Ldap-Group}" == "TEST" ) { iv) if ( "%{ldapmain1:Ldap-Group}" == "TEST" ) { modules/ldap:- =============' ldap ldapmain1 { groupname_attribute = jaringService groupmembership_filter = "(&(uid=%{Stripped-User-Name:- {UserName}})(objectclass=radiusprofile))" } Debug:- ====== ++? if ("%{ldapmain1:Ldap-Group}" == "TEST" ) rlm_ldap: - ldap_xlat expand: Ldap-Group -> Ldap-Group rlm_ldap: String passed does not look like an LDAP URL. expand: %{ldapmain1:Ldap-Group} -> ? Evaluating ("%{ldapmain1:Ldap-Group}" == "TEST" ) -> FALSE ++? if ("%{ldapmain1:Ldap-Group}" == "TEST" ) -> FALSE --haizam