> New-style auth uses authenticate(). > > I -think- it should be possible for any true value to be passed back out, > so instead of 'return 1' you could return an object that describes the > current status of the account? > Sounds good to me. -- http://www.suretecsystems.com/services/openldap/