Matt, With respect to your querry regarding PAM authentication samba checks only for the "auth" and "account" parameters. This means we check that the user is allowed to log on and has a user account on the system. It would be trivial to extend this if anyone feels this is warranted. Cheers, John H Terpstra Samba-Team