I'm a big fan of small dependancies for packages. I can't see any reason why we should start PAMifing packages when AFAICS it only gives the same functionality as the NSS part of glibc. I have setup libnss-ldap and it works very well - why would I need PAM? Matt.