I'm having some trouble with the ldap group configuration against AD and need a little help. Freeradius 1.1.4 MS 2003 Active Directory radiusd.conf groupname_attribute = "cn" groupmembership_filter = "(member=%{Ldap-UserDn})" groupmembership_attribute = memberOf users file DEFAULT Ldap-Group == "CN= CSG Group,OU=CSG,OU=ACE,OU=IATS,OU=MU,DC=col,DC=missouri,DC=edu", Auth-Type := LDAP Using ldapsearch as follows I get a match. ldapsearch -x -W -b"CN=Some GROUP,OU=" "(member= CN=Last\\\, First \(Department\),CN=Users,DC=col,DC=missouri,DC=edu)" The userDN actually looks like "CN=Last\, First (Department),CN=Users,DC=col,DC=missouri,DC=edu" but we have escape the \ and the () for bash. Freeradius isn't getting the same results. It looks like it has to do with the fact that the UserDN has a \, and (...) in it. Has anyone else ran into this before? Thanks, Brian Dourty System Administrator - Team Lead Division of IT (formerly IAT Services) University of Missouri - Columbia 573-882-1035