Sorry. There is a typo in the updatedn line of the replica configuration, which should read updatedn "cn=slurpd,ou=accounts,o=somedomain,c=com" It is absolutely the same dn as used in the rootdn and binddn directive. -marc -- =============================== Marc Kirchner <mail@marc-kirchner.de> ...don't just do. Be.