> Ivan Kalik wrote: >> >> No. How does your users file entry look like? >> > > this is my users file > > rusr Cleartext-Password := "clearPass" > Cisco-AVPair = "\"ip:inacl#0=permit ip any 10.0.0.0 255.0.0.0" > > maybe here anything wrong? :) No, that should overwrite the ldap entry. Post the debug. Ivan Kalik Kalik Informatika ISP