Dear all, I've LDAP tree structure as below, to seperate ADSL & DIALUP. But encounter one problem.. when userA = userB, LDAP will found userA's account although userB that actually login. This maybe due to DEFAULT sequence in users file. Any idea to solve this ? thanks.. ou=AAA | | ---------------------------------- | | ou=ADSL ou=DIALUP dn: uid=userA,ou=ADSL,ou=AAA ... dn: uid=userB,ou=DIALUP,ou=AAA.... serviceflag: ADSL serviceflag: DIALUP Users: ==== DEFAULT ldapadsl-Ldap-Group == "ADSL", Autz-Type := ADSL, Auth-Type := ADSL DEFAULT ldapdialup-Ldap-Group == "DIALUP", Autz-Type := DIALUP, Auth-Type := DIALUP radiusd.conf ======== ldap ldapadsl { basedn = "ou=ADSL,ou=AAA,ou=People,dc=jaring,dc=my" groupname_attribute = serviceflag } ldap ldapdialup { basedn = "ou=DIALUP,ou=AAA,ou=People,dc=jaring,dc=my" groupname_attribute = serviceflag authorize { Autz-Type ADSL { ldapadsl } Autz-Type DIALUP { ldapdialup } } authenticate { Auth-Type ADSL { ldapadsl } Auth-Type DIALUP { ldapdialup } }