>How about have your plugin generate a DN of the form > cn=LDAPURL,cn=PKINIT,cn=auth > >where LDAPURL is an LDAP URL where all characters special >to the DN syntax have been %xx escaped, then: > > sasl-regexp cn=(.*),cn=PKINIT,cn=auth $1 Works a treat -- I would have never thought of that! Thanks heaps. regards, -- Luke --