The problem with REMOTE_USER and the Msql module is solved; our dear punted had forgotten to set the protection on for the cgi-script ;-) Perhaps something to point out in the manual that if you want to have REMOTE_USER you must set the authentication on. Dw.