UNCLASSIFIED From: freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.or g [mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freer adius.org] On Behalf Of Tribes Tom Sent: Monday, 19 May 2008 18:33 To: FreeRadius users mailing list Subject: Re: users advanced configuration [SEC=UNCLASSIFIED] Can you explain how to do this ? I have try this : DEFAULT Auth-Type = ldap,Max-Daily-Session := 3600,Ldap-UserDN := `uid=%{User-Name},ou=heure,dc=network,dc=local` All three element of your test are assignments that always return true. You compare using == not := Try: DEFAULT Ldap-UserDN == `uid=%{User-Name},ou=heure,dc=network,dc=local`, Max-Daily-Session := 3600 Or DEFAULT Ldap-UserDN =~ "^uid=.*,ou=heure,dc=network,dc=local$", Max-Daily-Session := 3600 Matching is done from left to right, so Max-Daily-Session is only set if the Ldap-UserDN matches. It is probably unnecessary to set Auth-Type. Regards, Frank Ranner