You can make a DEFAULT entry in users file > DEFAULT Ldap-Group == "testgroup" Cisco-AVPair := "shell:priv-lvl=5" Ivan Kalik Kalik Informatika ISP Dana 24/5/2007, "Giovanni Lovato" <giovanni.lovato@aldu.net> piše:

Can I get a Reply-Item from LDAP groups? For example:

dn: uid=testuser,ou=people,dc=domain,dc=tld uid: testuser ....

dn: cn=testgroup,ou=groups,dc=domain,dc=tld cn: testgroup .... objectClass: radiusprofile radiusReplyItem: Cisco-AVPair := "shell:priv-lvl=5"

so that every user of testgroup gets a priv-lvl of 5?

Thank you, G.L. -- www.aldu.net/~heruan giovanni.lovato@aldu.net