>> > 3. Also i need a reject rule for those users, who was authenticated by >> > LDAP and do not belong to any ldap-group. I've tried Ldap-Group !*, but >> > this attribute always exists for every user :(
Try unlang: if (!control:Ldap-Group) { ... Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html