> Can we rewrite the operation differently for different authzDNs? > (as I think I know the answer, you can take this more as a suggestion > than a question) This is something I already wanted to look at. I guess there should be no particular problem, though ... Ando. -- Pierangelo Masarati mailto:pierangelo.masarati@sys-net.it