> I need to reimplement that code to support the new features and > APIs, and eliminate the ShibRequireAll command in a 2.4 build. I > don't think this is unfeasible in a short amount of time. You mean you "don't think this is feasible in a short amount of time?" I have a few authz type modules with the same problems. Jim