If it would be anything other than libnss_compat I'd say we need to be cleverer and avoid the malloc if possible. But users of this module don't deserve better. I did change the return value, though. NSS_STATUS_TRYAGAIN is more appropriate. -- ➧ Ulrich Drepper ➧ Red Hat, Inc. ➧ 444 Castro St ➧ Mountain View, CA â–