Hello, I found out something unusual, first, here is the part of smb.conf: ldap admin dn = cn=Directory Manager ldap group suffix = ou=Groups ldap machine suffix = ou=Computers ldap passwd sync = Yes ldap suffix = dc=zd-lj,dc=lan ldap user suffix = ou=People And here is the error: [04/Jun/2008:08:38:56 +0200] conn=38162 fd=67 slot=67 connection from 192.168.200.253 to 192.168.220.6 [04/Jun/2008:08:38:56 +0200] conn=38162 op=0 BIND dn="cn=Directory manager" method=128 version=3 [04/Jun/2008:08:38:56 +0200] conn=38162 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager" [04/Jun/2008:08:38:56 +0200] conn=38162 op=1 MOD dn="uid=majdac$,ou=uprava,ou=computers,dc=zd-lj," [04/Jun/2008:08:38:56 +0200] conn=38162 op=1 RESULT err=32 tag=103 nentries=0 etime=0 [04/Jun/2008:08:38:56 +0200] conn=38162 op=2 UNBIND [04/Jun/2008:08:38:56 +0200] conn=38162 op=2 fd=67 closed - U1 If you noticed, in smb.conf I have ldap suffix = dc=zd-lj,dc=lan, error is caused because in ldap modify comes only part of the suffix, dc=zd-lj. I tried to put ldap suffix into quotas (double - "), but then I got smbd error (doesn't start). Any ideas? Bye, Alan