Hello Matthew, > Why do in perl what you can do in FR directly? That will just > slow things down. > if (!(Ldap-group == 'cn=group,dc=example,dc=com')) { > reject > } will this work with nested groups? Cheers, Thomas