Florian Prester <[EMAIL PROTECTED]> wrote: > I want to grant access, if a user fullfills a LDAP-attribute, for example: > > users-file: > ... > test LDAP-Group == "test" ...
> ldap.attrmap: > ... > checkItem LDAP-Group Userid No. Do NOT add that entry to ldap.attrmap. It's wrong. Please read the documentation to see what LDAP-Group does. As a result of that entry, everything else in your post is not doing what you expect. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html