title: ntlm_auth against AD with validation of multiple group membership
body: <p>I have been trying to set up <code>freeradius</code> service for our network devices which would authenticate against Active Directory. I have the authentication working right now. The next piece I am trying to accomplish is to check whether the user is part of a group. Which is quite easy using the paramater "<code>require-membership-of</code>" for <code>ntlm_auth</code></p>
  
  <p>The config I have is this:</p>
  
  <pre><code>program = "/usr/bin/ntlm_auth --request-nt-key --domain=DOMAIN --require-membership-of='DOMAIN\NetworkAdmins' --username=%{mschap:User-Name} --password=%{User-Password}"
  </code></pre>
  
  <p>But I cannot find a way to check against 2 or more groups. Is there a way to do it somehow ? </p>
  
  <p>Thanks</p>