Dieter Kluenter wrote: > The krb5KDCentry objectClass is defined in smbK5pwd.c. > If the module is properly loaded, this objectclass should be > present. Nope, have a look at smbk5pwd.c. The heimdal LDAP schema has to be loaded separately. Ciao, Michael.