hi all, I have setup a FreeRadius server which is authenticating against an OpenLDAP database. It's all working very nicely and I have it setup with radius attributes being stored inside the LDAP database for each user. However, what would be nice, would be to have the ability to store radius attributes against groups that the user belongs to, so that when radius queries the user, it gets all the attributes for all the groups that the user belongs to. I've had a look through the rlm_ldap documentation which has some configuration options for groups, however it seems to me that this is for authenticating users based on which group they are in, rather than being able to fetch attributes from the groups that the user belongs to? Is this understanding correct, or am I missing something? thanks in advance for any help! :-) FreeRadius version is 1.1.3 (RHEL 5 build) if that's important. regards, jethro -- Jethro Carr www.jethrocarr.com/index.php?cms=blog www.amberdms.com