In version 0.20 of Apache::AuthTicket, there are a few calls to Digest::MD5->md5_hex(). According to the documentation for Digest::MD5, md5_hex is a function, not a method call. So, for example, when AuthTicket compares my password to the MD5 digest in my database that was placed there by php (md5()), it's essentially doing an md5sum of ("Digest::MD5","password"), which needless to say doesn't match the string that's in the database. Shouldn't these md5_hex calls be changed to Digest::MD5::md5_hex()? -- Steve Chadsey <[EMAIL PROTECTED]> Now playing: The Veils of Negative Existence (Manilla Road - "Crystal Logic")