Rich Megginson wrote: > As it turns out, PADL's nss/pam ldap ships with a schema that does this > very thing. On my RHEL4 system, there is a file called > /usr/share/doc/nss_ldap-226/ldapns.schema which contains the following: What do you think about packaging that with FDS, in the proper format? -- mike