I have an eDir user source setup on ZCM 10.3 that seems to be working fine, except for a few users in eDir that have address restrictions. When the users log into one of the allowed machines, their Novell login succeeds but they are prompted to login to ZCM. Watching an LDAP trace on the eDir server shows the user trying to bind to LDAP from the ZCM server (for CASA auth). If the User Source has a proxy user configured, shouldn't CASA bind as that proxy user and do a compare for authentication, instead of attempting to bind as the end user?