Hi I have in the modules/ntlm_auth_vpn command: exec ntlm_auth_vpn { wait = yes program = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name} --password=%{User-Password} --require-membership-of=domain1" } Is it possible to add another command ( with different domain ) and to add OR in order to choose which one will pass ? Something like this: exec ntlm_auth_vpn { wait = yes program = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name} --password=%{User-Password} --require-membership-of=domain1" OR program = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name} --password=%{User-Password} --require-membership-of=domain2" } It means that auth-type ntml_auth_vpn is right if one of these command will pass Thank pet