One patch I did want to make was to use ads_search_retry_sid() in ad_idmap_get_id_from_sid(). It seems cleaner to me, it may let the DSA perhaps do some optimizations it would not do on an ordinary search (I'm just speculating here of course). -- Luke -- www.padl.com | www.lukehoward.com