greetings, FR 3.0.x git 180e0b27022237a5f75c3c25d7eb1dbded634bad am I correct to expect User-Profile assigned if user belongs to Ldap-Group? here is how I supposed to get it working: ---[ file `users' quotation start ]------------------------------------------- ... DEFAULT Ldap-Group == "wifi-ABC", Called-Station-SSID == "ABC", Login-Time := 'Al0700-2200', User-Profile := "cn=wifi-ABC,ou=profiles,ou=RADIUS,dc=xyz" Reply-Message := "User-Profile is %{control:User-Profile}", Fall-Through = no ... ---[ file `users' quotation end ]------------------------------------------- here is what I have in debug: ---[ debug quotation start ]------------------------------------------- ... (6) files: Searching for user in group "wifi-ABC" ... (6) files: User found in group object "ou=groups,ou=RADIUS,dc=xyz" rlm_ldap (ldap): Released connection (9) (6) files: users: Matched entry DEFAULT at line 95 (6) files: EXPAND User-Profile is %{control:User-Profile} (6) files: --> User-Profile is (6) [files] = ok rlm_ldap (ldap): Reserved connection (10) ... (6) ldap: User object found at DN "uid=rad-jdoe,authorizedService=802.1x-eap-tls@xyz,uid=jdoe,ou=People,dc=xyz" (6) ldap: Waiting for search result... (6) ldap: Processing user attributes (6) ldap: control:Cleartext-Password := '********' (6) ldap: control:Password-With-Header += '********' r_ldap (ldap): Released connection (326) (6) [ldap] = updated ... ---[ debug quotation end ]------------------------------------------- no evidence, profile attributes were searched/processed ... my user is found to be a part of Ldap-Group, how to know why User-Profile is not assigned? in documentation it is written: if user is a part of Ldap-Group, the User-Profile will be assigned to the user. the only way, I found, to get User-Profile assigned to user is to set attribute radiusProfileDn value in user object directly ... but this causes one-user-one-profile result, what is not the resul I hoped for where are am I mistaking? -- Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET)