I have forgotten to say that our external LDAP is a Open Directory (MAC OS X Server).


joe