In message <Pine.NEB.4.33.0301231704120.16372-100000@vespasia.home-net.icnt.net >Please elaborate on the extra data bit. If you could look into it, it >would help. I seem to recall BSD Auth has a method for an authenticator to pass back arbitrary name/value pairs; does PAM have a good way to encode this? -s