Yes, using: *%{client:shortname}* (without space) has solved this issue. Thanks for suggesting. You guys are great!!!!!!! -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authorization-with-Active-Directory-tp5117364p5435854.html Sent from the FreeRadius - User mailing list archive at Nabble.com.