Jerry, > Better to simply update the nss_ldap filter on your Samba box. Could you please explain then, how we should do this on a Solaris 9 box, using the native Solaris LDAP stuff, without tampering with the current settings? I don't see a solution that fits. -Remy