> I'm looking now for the best way to integrate/rewrite > CookieCrumbler/LDAPUserFolder to take the validated Login-Name and > read the > roles of the user out of the LDAP-directory. What *specifically* does not work? Have you tried it and developed a list of features that are missing for it to work? jens