hi, suppose I have a samba 3 server with ldap backend and all users has both the sambaSamAccount and posixAccount. than it's enough or should I have to use idmap and create a new tree on my ldap server for the unix <-> windows id mapping? thnaks in advance. -- Levente "Si vis pacem para bellum!"