Hi, Thanks a lot Rich for your answer. AD Trust is not what I need. I need users be present in the LDAP Directory (FreeIPA, 389 DS) because an Oracle Application is using this for LDAP authentication and also data updates (just one attribute, the custom extension attribute from AD). Thx, -- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx