Hi I (deliberately for test purposes) have only one object with: posixAccount uidNumber gidNumber and only one object with: posixGroup gidNumber The gidNumbers are the same for both. getent passwd and getent group still however list all users and all groups regardless. Is there a cache I need to clear or is that the intended behavior? Cheers, Steve