My radius.conf file has the following for Group Membership Checking # # Group membership checking. Disabled by default. # groupname_attribute = cn groupmembership_filter = "(&(objectClass=GroupOfNames)(member= uid=%{User-Name},ou=people,dc=dxi,dc=net))" groupmembership_attribute = radiusGroupName The problem with this configuration is that if a user is a member of the group it will allow them access, even if they input the wrong password. Can someone help me with this please. Thanks David