I have a bunch of fully patched and up-to-date Solaris 2.9 machines, using an FDS ldap server. I just converted them over from NIS, thanks to the help from the documentation on the web site. I can login at the command line, I can ssh to them, I thought everything was working great. But when I sit down in front of the console, and try to login with dtlogin to CDE (the gui), it kicks me out. It's using the "other" lines from my pam.conf, which look like this: # # Default definitions for Authentication management # Used when service name is not explicitly mentioned for authentication # other auth requisite pam_authtok_get.so.1 other auth required pam_dhkeys.so.1 other auth binding pam_unix_auth.so.1 server_policy other auth required pam_ldap.so.1 If I look at the log file in the FDS server ("access"), everything looks fine. Has anyone else had a problem with dtlogin? Thanks for any help, Sam