> Can there be multiple "--retrievable_by_cert dn" in the myproxy-init? You can only have one, but it can be a regular expression, so you can separate each DN with '|'. -Jim