LDAPI, with transactions of some kind, and tidy up some other details. Then we will publish some more docs on this. But in the meantime, you seem to have cracked the setup for the less secure, unsafe (no transactions) but works-for-a-demo mode of operation :-). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc.