Behaviour change for eDir users in 3.0, if you just want to do auth/autz you should remove the call to ldap in post-auth, and set edir_autz = "yes" in the LDAP config. This is more efficient, and frees up Post-Auth for doing accounting stuff. -Arran