Sudhakar writes: > unique_attributes uid,mail,employeeNumber > unique_ignore > objectClass,dc,ou,o,employeeType,displayName,cn,sn,telephoneNumber It looks pointless from the manpage description to specify both of these. Maybe the overlay gets confused if you do so, and you should remove one of these lines? -- Hallvard