>did you setup ldap with samba combined >with your unix account. >ie. i have my unix account under > ou=People,dc=domain,dc=com Yep, this way. HR adds new people as an inetOrgPerson. Then when they get an account, we (CIS) simply add additional objectclass and related attributes to the object. Works out pretty nicely.