I came across ypAnything last time I looked through PAM vs. BSD auth discussions. I haven't tried it myself but it looks fairly simple and small and provides functionality of nsswitch. Here's the link: http://www.radux.com/ypAnything/ > Why not write a NIS -> LDAP proxy? > > That would take the complexity out of libc and, by implication, > privileged code. > > -d my 2c -- nickf3