I'm trying to figure out how best to get a meaningful error code / message from these failure cases. Any help would be appreciated. Mike -- Michael B Allen PHP Active Directory Kerberos SSO http://www.ioplex.com/