Riccardo Veraldi wrote: > I will try to put all the people I do not want to authenticate to a > specific LDAP group, > anyway I do not know how to do it using the users file to reject a > specific LDAP group You use the LDAP-Group attribute to match the users, and then set Auth-Type to reject. Alan DeKok.