does anyone know if the sudo ldap implementation supports ldap referrals. we are thinking of using ldap dynamic groups to get the equivalent of user_aliases but this method would require that sudo would understand ldap referrals. thanks again in advance, -al