Toly, It may have something to do with the NoAuth directory that can be configured on the apache server. I've never tried making in work, but I'd also like to know how it is done. Anyone else who could help us, we're all ears. (even though e-mails are rarely heard). thanks, Kyle Balling