OK, /var/log/wtmp shows, using "last 'username' " , the last real login and from where. But Horde still seems to be holding on to a date and place back in April. Anyone else with this problem? -mike