delay_pool mixed with an acl like this acl ldap_auth proxy_auth REQUIRED delay_access 1 allow ldap_auth delay_access 1 deny all A delay_class 4 should be good Fred