Hi, In my smb.conf I've the following IDMAP setup : passdb backend = ldapsam:ldap://127.0.0.1 idmap backend = ldap:ldap://127.0.0.1 idmap uid = 2000-10000 idmap gid = 2000-4000 ldap admin dn = cn=admin,o=xxx,c=be ldap suffix = o=xxx,c=be ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap idmap suffix = ou=Idmap ldap ssl = no The idmap mapping (sid uid/gid) is correctly save in the directory under ou=idmap,o=xxx,c=be. but also in the winbindd_idmap.tdb file. I've done a test by deleting this file. After that if I launch pdbedit -L, samba rebuild the all idmap mapping in winbindd_idmap.tdb but also in the LDAP directory. Then in LDAP, there is for each group and user 2 idmap entries !! Strange !! Any suggestion ? See you, Rapha?l -- Rapha?l Berghmans <rberghmans@arafox.com>