Hi, > so, am I correct, there is no way to set radiusCheckItem in LDAP to make > FR check the condition against LDAP record? no, I just stated the way I'd do it. with FreeRADIUS there are usually at least 5 ways of doing something. alan