X.501, 8.9.5 says:For an equality matching rule in which the syntax of the assertion is different from the attribute syntax to which the matching rule applies, rules for deriving a value of the syntax of the assertion from a value of the attribute syntax shall
be supplied. encUserPwdMatch does not adhere to this rule. -- Kurt ----- www.x500standard.com: The central source for information on the X.500 Directory Standard.