Don't know if this has come up on the Mac mailing list (I should probably subscribe to that...), but as a heads up, in case you haven't heard, apparently there's a bug in Lion that allows users to login using any password when Lion is configured to authenticate again [Open]LDAP: http://forums.macrumors.com/showthread.php?t=1197379 http://apple.slashdot.org/story/11/08/29/1844222/Mac-OS-X-Lion-LDAP-Vulnerab... John