Thanks, Damien. On 17 Mar 2009, at 17:36, Damien Sorresso wrote: > So have login call the Security framework's SessionCreate() SPI > before calling into pam_launchd. That should do the trick. I put the call into a separate PAM module and slid it in before pam_launchd, which seemed to work OK. Again, thanks. Stuart Crook