At present, the LDAP credentials (if needed) have to be provided in each stanza. Whilst the password can be obtained from a central source by using the exec: function, this is not available for the DN. Any changes to the DN will have to be made everywhere it appears. Would it be worth adding support for some kind of LDAP credentials provider? In the simplest case, this could be a file. This would make credential management easier. Alternatively, it would help to enable exec: support for the DN, but a generalised provider would be more flexible. Sebb --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx