Hi all, I have configured two samba-3.0.4 (PDC and BDC) with ldap (openldap). My problem is that we have a third ldap in my company and I changed the source of smbldap from idealx to sync that ldap. I did a debug and samba calls the script in the right way, but, this is the weird stuff, the script sync my two openldap servers but do not sync the third ldap. Running the script by hand it works perfectly, not through samba. This is my smb.conf: # Global parameters [global] workgroup = SMBV3DOMAIN netbios name = SMBV3PDC server string = Samba-Ldap PDC domain logons = Yes preferred master = Yes domain master = Yes local master = Yes wins support = No os level = 65 ; bind interfaces only = true ; interfaces = 127.0.0.1 10.0.0.91 10.0.0.92 hosts deny = ALL hosts allow = 127.0.0.1 10.0.0.0/255.0.0.0 security = user time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 mangling method = hash2 Dos charset = 850 Unix charset = ISO8859-1 load printers = No panic action = "echo 'Samba V3 Panic' | /bin/mail -s 'Samba V3 Panic' g.tranelli@inarcassa.it" ; ; for debug purpose only log level = 101 log file = /var/log/samba/log.%m passwd chat debug = Yes ; max log size = 0 syslog only = No syslog = 10 ; passdb backend = ldapsam:ldap://localhost encrypt passwords = Yes unix password sync = Yes ldap passwd sync = No obey pam restrictions = No passwd chat debug = Yes passwd program = /usr/local/sbin/smbldap-passwd %u passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n" ; ; logon script = netlogon.bat ; logon drive = L: ; logon home = \\SMBV3PDC\shared ; logon path = \\SMBV3PDC\profiles\%U logon script logon drive logon home logon path ; ; ldap admin dn = cn=samba,ou=Dsa,dc=example,dc=it ldap admin dn = cn=samba,ou=Dsa,dc=example,dc=it ldap suffix = dc=inarcassa,dc=it ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap idmap suffix = ou=Users ldap machine suffix = ou=Computers ldap ssl = No ldap delete dn = No ; add user script = /usr/local/sbin/smbldap-useradd -m "%u" ; delete user script = /usr/local/sbin/smbldap-userdel "%u" add machine script = /usr/local/sbin/smbldap-useradd -w "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" ; delete group script = /usr/local/sbin/smbldap-groupdel "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u" ;