okossuth@antel.com.uy wrote: > is it possible to have both groupofnames and posixgroup for a group entry? No, both are STRUCTURAL. And an entry can have only one STRUCTURAL object class. See also: http://www.openldap.org/faq/data/cache/883.html Also note that actually the LDAP clients determine a user's group membership. You have to clarify whether they are using one or the other. Ciao, Michael.