On 07/06/2010 05:31 PM, Nathan Kinder wrote: >> http://directory.fedoraproject.org/wiki/Howto:DNA > The way you have DNA configured will cause it to try to add a > "uidNumber" attribute to a posixGroup entry. You should change the > "dnaFilter" attribute for your "cn=UID numbers" DNA config entry to be > "(objectClass=posixAccount)". To clarify then, for the uids, instead of this : dnafilter: (|(objectclass=posixAccount)(objectclass=posixGroup)) It should be this : dnafilter: (objectclass=posixAccount) ? -- Daniel Maher <dma + 389users AT witbe DOT net>