Heinrich, Sebastian wrote: ... > [ldap] performing search in cn=group,cn=users,dc=aos-stade,dc=de, with > filter (&(objectClass=group)(member=)) > [ldap] object not found
That's pretty definitive. Have you tried running the queries by hand, to see what's going on? That should be pretty obvious... Also, does that LDAP query seem well-formed to you? > [ldap] performing search in CN=Heinrich\, > Sebastian,CN=Users,DC=aos-stade,DC=de, with filter (objectclass=*) > [ldap] performing search in CN=group1,CN=Users,DC=aos-stade,DC=de, > with filter (cn=cn=group,cn=users,dc=domain,dc=de) > [ldap] object not found That's also pretty definitive. > Can anybody help me? As I understand the debug the group is checked but > the user isn’t member of it. I totally sure that I am a member of the group. There is no magic here. You need to ensure that the server is doing the right queries, and that the queries return the data you expect. You haven't done that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html