Hi, > Does this mean that what I want to do is not possible? my advice was so you werent doing all that LDAP-Group , NAS-IP-Address stuff in unlang... regarding the load-balance, you should be okay just keeping that bit similar to how you had it ...heck, you might even try redundant-load-balance { ldap1 ldap2 } man unlang alan