>Ah, and another point: This is certainly not race-free. But >that is difficult to do with LDAP. This is true. In our code we ended up implementing "lazy" set accessors that took both a snapshot of the entry and a set of changes as inputs. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com