Hi I am busy setting up a freeradius system on CentOS7 , I can authenticate any AD user but want to only Authenticate if user belongs to a certain AD group I found this Thread where it explained that winbind module in Freeradius can do it http://freeradius.1045715.n5.nabble.com/Checking-Active-Directory-group-memb... ----- snip -------- Usage is similar to rlm_ldap. Enable the winbind module in mods-enabled, then you can: if (Winbind-Group == "my-user-group") { ... } for an instance of rlm_winbind e.g. ------- snip--------- I have the repo provided freeradius and samba and winbind installed and can't seem to find the winbind module it are referring to..... [root@freeradpoc ~]# rpm -qa | grep freeradius freeradius-doc-3.0.13-10.el7_6.x86_64 freeradius-utils-3.0.13-10.el7_6.x86_64 freeradius-3.0.13-10.el7_6.x86_64 freeradius-krb5-3.0.13-10.el7_6.x86_64 freeradius-ldap-3.0.13-10.el7_6.x86_64 [root@freeradpoc ~]# rpm -qa | grep samba samba-common-4.8.3-4.el7.noarch samba-winbind-modules-4.8.3-4.el7.x86_64 samba-client-libs-4.8.3-4.el7.x86_64 samba-client-4.8.3-4.el7.x86_64 samba-libs-4.8.3-4.el7.x86_64 samba-winbind-clients-4.8.3-4.el7.x86_64 samba-common-libs-4.8.3-4.el7.x86_64 samba-common-tools-4.8.3-4.el7.x86_64 samba-4.8.3-4.el7.x86_64 samba-winbind-4.8.3-4.el7.x86_64 [root@freeradpoc ~]# Is this maybe due to the repo provided packages that I used...? Regards *Alex Jordaan* Linux Engineer -- Disclaimer: https://www.shopriteholdings.co.za/copyright-etc--statements/email-disclaime... <http://www.shopriteholdings.co.za/copyright-etc--statements/email-disclaimer.html>