Forgot some info that may help. In my syslog, I get the following confirmation of authentication: PAM_unix[468]: (login) session opened for user shaft by LOGIN(uid=0) This is why I think it may have to do with the session entry. Thanks again. Cliff