Jason Alderfer wrote: >>> the function ldap_postauth in rlm_ldap.c still looks for Ldap-UserDn >>> in request->packet->vps. > > The attached patch updates ldap_postauth to check the control items, which > solves the problem for me. I assume that's the best way to fix it. I've added the patch, thanks. Alan DeKok.