hi, user-name is "cn=gav,o=pukekohe_hig" ?? really....? seems rather 'unusual' should we say. do you have such a user-name in the LDAP? surely you just have 'gav' ? alan