Hi, I'm currently configuring freeradius with an openldap backend for network device authentication. For each vender I have to add a set of attributes to my ldap user, then I can log in with the desired access. So far this is working as expecting (mostly, but i'll save that for a different thread). I don't want to have to added each of the specific attributes into each ldap user who needs admin access. Instead I want to make the admin users members of an ldap group which contains the needed attributes. I cannot get freeradius to use the ldap groups (and don't ever see it send ldap queries for groups). in my modules/ldap file I have: groupname_attribute = cn groupmembership_filter = "(member=%{control:Ldap-UserDn})" groupmembership_attribute = radiusGroupName Does anyone have an example of how this is supposed to be configured?