I hate to leave this most interesting discussion but I'm going on vacation and I won't be able to follow it for the next weeks. But I'll be back. I think the most important work in the near future is to promote the nsroles and make it a standard in the OSS ( hoping for OpenLDAP to adopt it) before we get some other de-facto Industry Standard. Frerk Meyer EDEKA Aktiengesellschaft GB Datenverarbeitung Frerk Meyer CC Web Technologien New-York-Ring 6 22297 Hamburg Tel: 040/6377 - 3272 Fax: 040/6377 - 41268 mailto:frerk.meyer at edeka.de