pam_ldap is returning this error to the /var/log/secure file if I uncomment the account required /lib/security/pam_ldap.so line from: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required /lib/security/pam_env.so auth sufficient /lib/security/pam_unix.so likeauth nullok auth sufficient /lib/security/pam_ldap.so use_first_pass auth required /lib/security/pam_deny.so account required /lib/security/pam_unix.so #account required /lib/security/pam_ldap.so password required /lib/security/pam_cracklib.so retry=3 type= password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow password sufficient /lib/security/pam_ldap.so use_authtok password required /lib/security/pam_deny.so session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so session optional /lib/security/pam_ldap.so I have verified the user is indeed in the ldap database with: /usr/local/sbin/smbldap-usershow.pl <usernamehere> there is a full output. Alan Epson Inkjet Printer FAQ: http://welcome.to/epson-inkjet