I have just installed 2.05 and have successfully linked to my ldap server. I would like to build in MAC address checking on top of the user name / password auth. I read some docs and concluded that I could change access_attr = to use radiusCallingStationId. I set the value of this in LDAP to that which I could see in the debug output; Calling-Station-Id = "0019E3021FD8". The user happily logged in, however when I changed the value he could still log in! Now I am guessing that this attribute is only checked for presence within the user profile rather than checking if they match. Is there a way of getting Radius to check that the Calling-Station-Id matches radiusCallingStationId before access is allowed? I have read the ldap docs and not been able to find what I am looking for. Many thanks, Neil. -- Neil Marjoram Systems Manager Adastral Park Campus University College London Ross Building Adastral Park Martlesham Heath Ipswich - Suffolk IP5 3RE Tel: 01473 663711 Fax: 01473 635199 Reclaim Your Inbox! http://www.mozilla.org/products/thunderbird