samba.schema: attributetype ( 1.3.6.1.4.1.7165.2.1.32 NAME 'sambaKickoffTime' DESC 'Timestamp of when the user will be logged off automatically' This is a bit confusing, since it seems to work more like the 'shadowExpire' Attribute. So if I've passed kickofftime, Samba(&Windows) refuses me to log in because the account "has been expired". IIRC usrmgr.exe uses this value in the same way. ciao Dariush -- PGP Fingerprint: 0x886C99A1