the list mentions, that winbind should not run on a DC at all...why don't you use pam_ldap/pam_smbpass module? greez -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany