Is there any way to perform a different authentication method based on the specific client entry (or group of entries) using the ntlm_auth method? We're implementing the ntlm_auth interface to AD, and need to specify the group to authenticate against differently for different classes of machines/devices. I've followed the instructions on http://deployingradius.com/documents/configuration/active_directory.html and it works great for one group when I add the option --require-membership-of=SomeGroup but I need a way to figure out how to specify that group name, perhaps based on the nastype, or some other variable I can set in the client configuration. Any ideas? Don O'Neil Senior Network Engineer SAIC - CCSD Network Operations (702) 351-7261 cell (702) 799-6174 fax 0099-5941 wan oneilda@saic.com