Since I am trying to learn both Samba3 & OpenLDAP 2.1.x, I found the IDEALx tools very useful, but needing some modifications to work. Here is my post to the IDEALx mailinglist - maybe it's helpful to someone in here (NOTE: I'm using the IDEALx tools from CVS since those are the only ones that work with Samba3 yet): I've modified the Samba tools to work with OpenLDAP 2.1.x which is more strict with schema standards. If this has already been addressed in this mailing list, my apologies. I'm working with the CVS version of the IDEALx tools which have been modified to work with Samba3. In order for the tools to work with OpenLDAP 2.1.x line 262 (or thereabouts) needs to be modified to include the relevant superior objectclasses to inetOrgPerson as follows: 'objectclass' => ['top', 'person', 'organizationalPerson', 'inetOrgPerson', 'posixAccount'], Not sure if there is a better way to do this so that the IDEALx tools discern whether OpenLDAP 2.1.x is running or OpenLDAP 2.0.x and modify the line accordingly. Maybe it does not matter since 'top', 'person', 'organizationalPerson' do not require any new attributes that aren't already provided for ('sn' & 'cn'). Anyhow, I'll leave it to the coders to figure out the best way to approach this. For me, thanks for the great tools! I look forward to the next final release! -- Benjamin Krein www.superk.org