Hi, I've just spotted something that I'm not entirely sure is right: I get a reply from another host and it feeds back into my post-auth section. I happen to have the 'cui' module set in it. The existing 'cui' policy will strip the User-Name property regardless of whether the conditions for the CUI were met or not, is that correct? Shouldn't it strip the User-Name only if a CUI was generated? I'm just wondering... Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 Janet, the UK's research and education network. Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238