I have one samba server as the PDC for our org. Another samba server is supposed to permit access to shares based on authentication from the aforementioned PDC. I'll call this second computer "SMB" for simplicity. PDC has an LDAP and PAM database for authenticating all users. SMB is setup as follows (smb.conf): workgroup = NPC-USA netbios name = SMB server string = %h server (Samba %v) security = DOMAIN encrypt passwords = Yes password server = * passwd program = /usr/bin/passwd %u log file = /var/log/samba/log.%m max log size = 1000 name resolve order = hosts wins lmhosts bcast socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = cups local master = No domain master = False dns proxy = No wins server = 10.0.1.13 comment = Printers path = /var/spool/samba hosts allow = 10.0.1.0/255.255.255.0 printing = cups printer name = lp Well, unless I add a user to SMB (adduser *****) then that user will not have access to any shares on SMB. This doesn't seem right, or is it? Also, should the userID on the PDC be the same on SMB? What if I want to use groups? Do I need to make the groups on PDC and SMB? -- Curtis Vaughan North Pacific Corporation http://www.angelfire.com/wa/noentry/home.htm WashTech (CWA Local 37083) IWW x353203