Thank you, that worked. I went from there and started tightening down the policy, and I am getting the expected results. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3254 bytes Desc: not available Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20080527/9cfe3164/attachment.bin