Worth 3.x pretty much anything that use are using PERL for can be done natively in freeradius with unlang. If using PERL to do ldap checks then that's certainly true. The PERL script will have some access rights, use those.... and learn about e.g. if (%{ldap:\\\.......}) constructs.... alan