JFYI to save other people some time. Before firing up "apt-get upgrade" you'll be best off putting a hold on all the libpam packages, as the 0.72-12 version on ftp.us.debian.org fails on a bad symbol in libpam-misc, which locks you out of the box except if you boot single. -- Brian S. Julin