You've got to set up some group checking...you haven't, so ldap-group means nothing to the server so you hit the default reject that you added... alan -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120622/0257805e/attachment.html>