[snip] > Actually PADL's pam_ldap has had support for Netscape password policy > for many years - you just have to enable it and tell it the DN of the > policy object. Recently support has also been added for the IETF draft Can you expand on the "...tell it the DN..." part there? Greg