Awesome, thanks for all the feedback. So what I'm hearing is that the OpenLDAP client does indeed fail over to the second and third (and so on) A record until it finds one that works, and that Stanford has been doing this for year. Good stuff. Thanks so much! Tim Gustafson BSOE Webmaster UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354