Hi, in the schema file the entry for require message authenticator is listed as olcAttributeTypes: ( 1.3.6.1.4.1.11344.1.100.2.6 NAME 'radiusClientRequireMa' SINGLE-VALUE DESC 'Require Message Authenticator' EQUALITY booleanMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.7' ) thus one has to enter TRUE or FALSE in LDAP - everything else (I tried it with true, Yes, yes, YES and 1) throws an LDAP error. But now, with TRUE FR won't start anymore. Below is the debug log .... Thu Apr 30 16:34:04 2015 : Debug: client radiusClientIdentifier=127.0.0.1,ou=RADIUS,ou=Services,dc=example,dc=com { Thu Apr 30 16:34:04 2015 : Debug: ipaddr = 127.0.0.1 Thu Apr 30 16:34:04 2015 : Debug: require_message_authenticator = no Thu Apr 30 16:34:04 2015 : Debug: secret = "testing123" Thu Apr 30 16:34:04 2015 : Debug: nas_type = "other" Thu Apr 30 16:34:04 2015 : Debug: limit { Thu Apr 30 16:34:04 2015 : Debug: max_connections = 16 Thu Apr 30 16:34:04 2015 : Debug: lifetime = 0 Thu Apr 30 16:34:04 2015 : Debug: idle_timeout = 30 Thu Apr 30 16:34:04 2015 : Debug: } Thu Apr 30 16:34:04 2015 : Debug: } Thu Apr 30 16:34:04 2015 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap (ldap): Client "radiusClientIdentifier=127.0.0.1,ou=RADIUS,ou=Services,dc=example,dc=com" added Thu Apr 30 16:34:04 2015 : Debug: client radiusClientIdentifier=192.168.0.20,ou=RADIUS,ou=Services,dc=example,dc=com { Thu Apr 30 16:34:04 2015 : Debug: ipaddr = 192.168.0.20 Thu Apr 30 16:34:04 2015 : Error: unknown[0]: Invalid value "TRUE" for boolean variable require_message_authenticator Thu Apr 30 16:34:04 2015 : Debug: } Thu Apr 30 16:34:04 2015 : Error: unknown[0]: Error parsing client section Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap (ldap): Released connection (4) Thu Apr 30 16:34:04 2015 : Error: /etc/freeradius/mods-enabled/ldap[1]: Error loading clients Thu Apr 30 16:34:04 2015 : Error: /etc/freeradius/mods-enabled/ldap[1]: Instantiation failed for module "ldap" Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap (ldap): Removing connection pool Thu Apr 30 16:34:04 2015 : Info: rlm_ldap (ldap): Closing connection (4) Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap: Closing libldap handle 0x26578c0 Thu Apr 30 16:34:04 2015 : Info: rlm_ldap (ldap): Closing connection (3) Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap: Closing libldap handle 0x2656d40 Thu Apr 30 16:34:04 2015 : Info: rlm_ldap (ldap): Closing connection (2) Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap: Closing libldap handle 0x26460a0 Thu Apr 30 16:34:04 2015 : Info: rlm_ldap (ldap): Closing connection (1) Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap: Closing libldap handle 0x26454b0 Thu Apr 30 16:34:04 2015 : Info: rlm_ldap (ldap): Closing connection (0) Thu Apr 30 16:34:04 2015 : Debug: rlm_ldap: Closing libldap handle 0x26278e0 I know FR wants yes / no but those are not boolean so I guess the schema is not correct - or do you plan to update FR to accept TRUE / FALSE instead of yes / no? Thanks