Hi, I have a samba 2.2.8a with LDAP backend. System auth also uses ldap. I used base.ldif from idealx.org to create base group entries to my ldap base. Client is win2000 sp3. When I share folder out from w2k and choose "permissions", i can select users from localhost or samba domain - there are no double entries. But, when I want to change permissions of file on my samba share and click "permissions", I see this: http://raunz.pri.ee/linux/samba/samba_groups.jpg Groups "account operators", "administrators", "domain admins", "domain users"... appear twice in the listing. (for windows, some are "local groups" and others "global groups"). Group "users" appears even 3 times. which one is the correct group, that i added to LDAP base??? from where come these double entries??? and how to get rid of them and see only these groups, that are listed below? # getent group (entries gid > 200) Domain Admins:x:200: Domain Users:x:201: Domain Guests:x:202: Administrators:x:220: Users:x:221: Guests:x:222:nobody Power Users:x:223: Account Operators:x:224: Server Operators:x:225: Print Operators:x:226: Backup Operators:x:227: Replicator:x:228: Enterprise Admins:x:229: regards, - Rauno Tuul -