Kris Lou wrote: > I've checked my ldif's - the groups exist, the users exists as > memberids, but it looks like samba is only checking the gid? > Can you post the LDIFs of your groups (you can edit out any incriminating evidence ;)? Sounds like your groups are lacking correct sambaSID or sambaGroupType attributes.