Here's what I get when I run ldapsearch: bash-2.03# ldapsearch -h cnyitlin02 -b "dc=foo,dc=com" -L "objectclass=*" -D "uid=proxyagent,ou=profile,dc=foo,dc=com" -w password dn: dc=foo,dc=com dn: cn=Directory Administrators, dc=foo,dc=com dn: gidnumber=5000,cn=Directory Administrators,dc=foo,dc=com dn: gidnumber=6000,dc=foo,dc=com dn: uid=testdba,gidnumber=6000,dc=foo,dc=com dn: ou=profile,dc=foo,dc=com dn: cn=default,ou=profile,dc=foo,dc=com dn: cn=tls_profile,ou=profile,dc=foo,dc=com dn: nisdomain=composers.foo.com,dc=foo,dc=com dn: uid=proxyAgent,ou=profile,dc=foo,dc=com how do I get rid of the nisdomain in there? moreover, do I need to? ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs