Tim Hartmann wrote: > > - The plug in won't work for the RDN names we have in memberUid, (we > actually have both the RDN and DN listed as values under the memberUid > attribute, i was hoping it would see the DN, but it didn't) memberUID is not meant to hold a DN (see RFC 2307). It's for storing the value of attribute 'uid' of a member entry. If you store DNs therein be prepared for interop issues with pam_ldap / nss_ldap. Ciao, Michael.