You still need nss_ldap if you wish to move accounts out of /etc/passwd. I'm aware of the Solaris crasher on endXXent(). It might be in _nss_ldap_default_destr(). I'll look into it. -- Luke