On Fri, 5 Jun 2009, Michael H. Warfield wrote: > Simplify your life. Use certificates and the DN's in the certificates. > Then it's "leftid=%fromcert" and "rightid=%fromcert". Do you actually run with "rightid=%fromcert"? I don't think that works at all. One should just leave out the rightid, or specify the DN manually. Paul