Hi, I found in the idmap_ldap.c a reference to the ldap attribute "ntSid" but I think it's replaced with sambaSid. See you, Raphaël -- Raphaël Berghmans <rberghmans at arafox.com>