> > The Apache logs do not show any outgoing requests to the LDAP farm.
> Could it be something like system LDAP groups via /etc/nsswitch.conf and not even mod_ldap?
We're not using LDAP for groups, only for passwd/shadow. Though I had wondered if 'daemon' needed to be added to nss_initgroups_ignoreusers (or something similar) in /etc/ldap.conf
But I could always take another peek at nsswitch.conf
Thanks!