What sort of objectClass do people generally use for the bindDN? We're using extensibleObject (set up by my predecessor) and I'm seeing obscure problems such as the userPassword attribute not being copied during a sync (not a replication). -- Dave Horsfall DTM VK2KFU daveh@ci.com.au Ph: +61 2 9906-7866 Fx: 9906-1556 Corinthian Engineering, Level 1, 401 Pacific Hwy, Artarmon, NSW 2064, Australia