> Basically I've moved "tags" to "tagged" before elements (only to clarify), and > changed SEQUENCE to PDU (because I think it really means any SEQUENCE, SET, or > CHOICE). > Does anyone see a problem with this? Yes. 1. LDAP has no SET, only SET OF. 2. I don't think you mean to ignore a unrecognized tag in a CHOICE. That is why I said SEQUENCE. Mark Wahl Sun Microsystems Inc.