> Unfortunately I lost the previous message of this thread, where Alan

> Dekok's respond is presented.

> Anyway, the content of it was he offered to use groups membership. He

> also gave a specific file: rlm_passwd which should be configured in

> order to achieve groups membership as an indication which IAS server

> would respond each authentication request.

 No.  You configure groups on the FREERADIUS server.

> The thing is, though went over the help file of rlm_passwd a couple of

> times, I didn't see clear explanation how to configure it when working

> in IAS-Active Directory environment.

  If you're using IAS and not FreeRADIUS, don't ask questions here.

  If you're using FreeRADIUS a proxy to IAS, you can configure groups on FreeRADIUS, and apply policies there.

  Alan DeKok.

Ronen Kfir:

I would like to use FreeRADIUS as proxy to IAS servers. The question now is how do I create those FreeRADIUS groups and how do I manage the groups membership within FreeRADIUS.