The -222 is correct for no grace logins... someone changed my test users password out from under me this morning and I just now realized. -- View this message in context: http://shibboleth.1660669.n2.nabble.com/authn-eDirectory-LDAP-and-grace-logins-tp7626143p7626167.html Sent from the Shibboleth - Users mailing list archive at Nabble.com.