On 07/06/2010 07:04 PM, Nathan Kinder wrote: >> To clarify then, for the uids, instead of this : >> >> dnafilter: (|(objectclass=posixAccount)(objectclass=posixGroup)) >> >> It should be this : >> >> dnafilter: (objectclass=posixAccount) >> >> ? >> > Yes, that is correct. The current setting you have causes DNA to add a > "uidNumber" attribute to newly created "posixAccount" and "posixGroup" > entries. You only want DNA to add the "uidNumber" attribute to > "posixAccount" entries. That makes sense. Somebody may wish to update the Howto on the documentation site. :) Thanks ! -- Daniel Maher <dma + 389users AT witbe DOT net>