> Need to authenticate by doing a basic bind against an AD server. All users > are contained in seperate OU's below a primary OU. That's not a good way. It will work only for pap requests. http://deployingradius.com/documents/configuration/active_directory.html Ivan Kalik Kalik Informatika ISP