Hi Chuck, Thanks. Editing /etc/pam.d/gdm did the trick. Here's the contents of that file in case it helps anyone else. John #%PAM-1.0 auth requisite pam_nologin.so auth sufficient pam_winbind.so auth sufficient pam_unix.so nullok_secure use_first_pass auth required pam_env.so @include common-auth @include common-account session required pam_limits.so session optional pam_console.so @include common-session @include common-password If this looks glaringly wrong to anybody, I'd be pleased to hear about it. Thanks for the quick reply Chuck! John <div> On 10/11/06, <a href="mailto:cliebow@midmaine.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">cliebow@midmaine.com</a> <<a href="mailto:cliebow@midmaine.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> cliebow@midmaine.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> we authenticated for several years a while back to ad without Any alteration in /opt/ltsp.. before moving up to ldap...do you suppose it is pam and gdm that is bothering?fwiw my notes are in <a href="http://wiki.ltsp.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> wiki.ltsp.org</a> under windows integration..chuck _______________________________________________ K12OSN mailing list <a href="mailto:K12OSN@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> K12OSN@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> https://www.redhat.com/mailman/listinfo/k12osn</a> For more info see <<a href="http://www.k12os.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.k12os.org</a>> </blockquote> </div>