Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes and idmap config * : backend = ad 2. Do the terms in (1) above apply equally to Samba4 beta6 and Samba 3.6.3? 3. If I specify either in (1) then idmap config : range = abc-xyz becomes meaningless. Cheers, Steve