Did you install libnss-ldap and libpam-ldap? You need those. Also, in /etc/nsswitch.conf: passwd: files ldap shadow: files ldap group: files ldap I found that Samba works better with the "ldpasam:trusted = yes" parameter. In this case, your LDAP database MUST contain the entire POSIX account information.