I have a check to verify that a user is allowed to use radius at all, simply by checking if they are in the "radius" group. DEFAULT Group != "radius", Auth-Type == Reject Reply-Message == " Not in radius group" I would like to expand this to check against TWO groups. If user is in either one then pass , if user is in neither then generate the Reply-Message == " Not in radius group(s)" Its likely a simple tweak, but its escaping me. Is this where !* would serve? Thank You! ________________________________ This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.