Nathan Hay wrote: > Do I then remove ldap from the authorize section so that it doesn't call > it every packet? I did a bunch of testing and it seems that I have to > do that to reduce the number of calls to our eDirectory servers. Yes. But it has to be listed inside of a sub-block, as described in the message you responded to. Alan DeKok.