Hi all, suders.ldap man says: Another difference is that negations on the Host, User or Runas are currently ignorred. For example, the following attributes do not behave the way one might expect. sudoUser: !joe sudoUser: ALL sudoUser: !joe sudoHost: ALL sudoHost: !web01 Ok. So ¿can I negate a host? ¿how? -- Thanks, Jordi Espasa Clofent