I have joined a windows domain, which is part of a larger active directory forest. wbinfo -m gives me a long list of domains. ldapsearch gives me a long list of AD information, but in the end an error: ldapsearch -LLL -C -h ww901.mycompany.net -b "DC=WW901,dc=mycompany,dc=NET" -s sub "(&(servicePrincipalName="host/*")(objectclass=computer)) " servicePrincipalName SASL/GSSAPI authentication started^M SASL username: de7b07k0@WW901.mycompany.NET^M SASL SSF: 56^M SASL installing layers^M dn: CN=T126032c,OU=Computers,OU=SBS,OU=ANKT,OU=TR,DC=ww901,DC=mycompany,DC=net^M servicePrincipalName: SMTPSVC/T126032C^M servicePrincipalName: SMTPSVC/t126032c.ww901.mycompany.net^M servicePrincipalName: HOST/T126032C^M servicePrincipalName: HOST/t126032c.ww901.mycompany.net^M ^M dn: CN=T113665c,OU=Computers,OU=SBS,OU=ANKT,OU=TR,DC=ww901,DC=mycompany,DC=net^M servicePrincipalName: HOST/T113665C^M servicePrincipalName: HOST/t113665c.ww901.mycompany.net^M ...... ..... But in the end I get: Operations error (1)^M Additional information: 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece^M What does this error mean? I got lots of information from AD And should have authenticated, correct?? Thanks Norbert