Hi there, this patch enchants LDAP auth module to support group authentication. so user will be only authenticated against if they are in an aproperiate group. I used posixgroups, but since you can define anything as the access_attr this shouldn't be much of a problem -- Regards, Wiktor Wodecki