> I agree with you. But I am reading those attributes from LDAP. In LDAP >"entitlements" attribute is defined as Multivalue (array).
Which is of no use to you. >I can't not change the existing LDAP structure. > Are you a developer or not? If you are, then you say what LDAP structure should look like. If your superiors are in love with that multivalue field insist that data that you need should be kept in a separate attribute as well. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

