Rob and Chris, Thanks for the information. I would be interested to hear anything about x.509 and LDAP. Basically, somebody wants me to look at a java application that partially does what is needed. The current options are to improve this application or build something from scratch. I displayed my small amount of zope work, and I tried to explain zope's abilities. I believe that zope might be an option for this application, but x.509 is a definite requirement. I don't know any requirements for the x.509 other than it will be used for authentication. Oh yeah, our company uses Netscape web servers also. I listed apache/stronghold because I have a bad habit of relating everything to open source products. Clarence