Hi, I have grouped my users in ldap using "groupofNames" objectclass. now one group of users which I only want to allow to authenticate to the radius server has a dn of: dn: cn=radiususers,ou=groups,o=example,dc=com It has "member" attributes such as: member: uid=user2,ou=people,o=example,dc=com member: uid=user3,ou=people,o=example,dc=com member: uid=user4,ou=people,o=example,dc=com member: uid=user5,ou=people,o=example,dc=com In my radiusd.conf I have these lines: groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=GroupOfNames) (member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames) (uniquemember=%{Ldap-UserDn})))" However, I'm not sure where to specify that only the member of the group "radiususer" is allowed to authenticate... Although I can simply add an dialupAccess attribute to each user I only want to allow, It is difficult because I have so many users... If only there's a way to just tell radius to only allow the member of this group.... Please help.. thanks.