Robert Becskei wrote: -snip- > > here is the working entry for root : -snap- your entries differ in used objectClasses, check if you have a filter in your nss_ldap configuration that checks for posixAccount or inetOrgPerson. cheers Paul