On Mon, 11 May 2015, mourik jan heupink wrote: > Ok, I do neither: I simply logon as root, and type: > samba-tool ldapcmp ldap://dc3 ldap://dc2 --filter=whenChanged > (nothing else!) and this checks all attributes. How interesting. That definitely does not work for me (using samba4 4.1.16). Steve