Tony Austin wrote: > Is this what it should be? Seems likely to me. Nope, a unix account consists of posixAccount OC from nis.schema, a samba accounts needs an ADDITIONAL sambaSamAccount OC from samba.schema. For groups its posixGroup and sambaGroupMapping. cheers Paul