Hi... I need to do multiple ldap lookups (2).. The purpose of both the ldaps are different so it does not abide with configurable_failover scenario in a way. ldap1. This ldap is solely used for authentication for given user. ldap2. This ldap is solely used for checking ldap attribute ex. productCode for given user. User exists in BOTH The ldaps but in ldap2 we don't store the password hash. So its just userid with given attributes. Here is what should happen for a given user. If(authentication in ldap1 success) { if(productCode attribute exists in ldap2 success) { return Access-Accept. } else { return Access-Reject. } } else { return Access-Reject. } Any inputs will be greatly appreciated. Thanks in advance. ____________________________________________________________________________________ Sponsored Link Try Netflix today! With plans starting at only $5.99 a month what are you waiting for? http://www.netflix.com/Signup?mqso=80010030