Hi all Small quiz How do you (if authenticating against LDAP), disallow the passwords from being stored in the user.xml files? Any ideas Thanks Regards RM