Hi... If you use pam_winbind in an long running application which authenticates different users (like in an POP3 server), the pam_winbind module uses one file handle per authentication request (and don't free it). This is because the module don't close the socket to the winbind daemon after authentication. the following patch should fix the problem: --- samba-2.2.8a/source/nsswitch/pam_winbind.c.old 2002-04-30 15:27:21.000000000 +0200 +++ samba-2.2.8a/source/nsswitch/pam_winbind.c 2003-04-28 17:01:25.000000000 +0200 @@ -130,6 +130,8 @@ } } + close_sock(); + return PAM_SUCCESS; } Hope, this will help you. If i missed something, please tell me and i will try to solve it. Bye...