Group membership

[Олег Кобелев]

 Hello gents,
I want to create groups (profiles) for different WIFI SSID. I am using Airespace-Wlan-Id check attribute. When I am applying it to user - it works fine. 
For example if users comes from Wlan with id 8 and Airespace-Wlan-Id := 8 he will be connected. And if Airespace-Wlan-Id doesn't match he will be rejected.

But when I am applying this attribute to the group user belongs to - it doesn't work. User will be connected anyway.
What am I doing wrong?