Hi, there is a new option 'unix_primary_group' in idmap_ad. If we set 'unix_nss_info = yes, shouldn't we then also set 'unix_primary_group' to yes? Andreas -- Andreas Schneider GPG-ID: CC014E3D www.cryptomilk.org asn at cryptomilk.org