> You've checked that the configuration files (nsswitch.conf, ldap.conf) > which specify your LDAP setup can be read by your users? Nalin, Thank you! *grin* I knew I was overlooking something... I didn't imagine it was as simple as permissions. In any case, thanks for pointing out the obvious. Functionality broke after a mass 'yum update'. Everything was in good working order before the update, and I wasn't going around twiddling permissions... But you were right, the only problem was permission were wrong on /etc/ldap.conf. The update did create an /etc/ldap.conf.rpmnew, which proper permissions (644). Maybe some package (most likely nss_ldap) in the 'yum update' had a side effect of changing the permissions of /etc/ldap.conf to 600. Sorry for the (most likely) false alarm. *smile* Peace out, Derek