Corinna, I am done with the next series of passwd/group patches to separate internal and external calls. They affect sec_acl.cc, thus we should probably discuss and finalize patch ntsec #2 before I send this one. Pierre