Thanks Patrick, After some changes... I think I shall go and eat and come back later. Thanks for all the help :) > For Posix groups, most systems expect you to use "memberUid" rather > than "uniqueMember" to specify group members, and to include uid names > rather than DNs. I now have this: [fontenwp at ldap bin]$ ./ldapsearch -b "dc=fontenotshome,dc=org" "objectclass=posixgroup" version: 1 dn: cn=LinuxAdmins,ou=Groups, dc=fontenotshome,dc=org objectClass: top objectClass: groupofuniquenames objectClass: posixgroup cn: LinuxAdmins gidNumber: 750 memberUid: fontenwp dn: cn=LinuxUsers,ou=Groups, dc=fontenotshome,dc=org objectClass: top objectClass: groupofuniquenames objectClass: posixgroup cn: LinuxUsers gidNumber: 500 memberUid: fontenwp [fontenwp at ldap bin]$ I still have this: [fontenwp at ldap bin]$ id uid=500(fontenwp) gid=500 groups=500 [fontenwp at ldap bin]$ and the error "id: cannot find name for group ID 500" -------------------------------------------------------------- 16:44:17 up 2:00, 1 user, load average: 0.11, 0.05, 0.01