Wolf,
That's extremely enlightening and probably correct.
The line in the config file is commented out, but I suspect it defaults to no (it's a BSD box).
I certainly get the response you mentioned for 'no' when I added the debugging.
It's been decided however that due to the low value of the info and multi-layer security (it's entirely an internal system) that we really don't need to take this any further.
I'll certainly try and remember it for future ref though(!)
I didn't realise there was a diff between interactive passwd and via a script. I assumed it'd use the same encryption/checking... wrong.. :-(
Thx again
Chris
PS: how's your Net::SNMP? See my node 495954.