Hi all! Question about idmap=ldap backend in domain with win2k PDC: Should I manually add all domain users to ldap and then retrieve the idmap from ldap, or in case of sucessfull authentication againt Win2k PDC, users are addedd automaticaly to ldap? Or I can use idmap ldap backend only in SAMBA LDAP PDC case? Thanks! Gints