> I cannot add uid or gn or givenname, why? You answered your own question. The objects you are using don't have uid or gn or givenname as an attribute. Either create your own object (which has these attrs) OR grep for each one of these attributes (and use those objects- of course you'll need to look at that oc to see what it requires).