I apologize if this has been addressed in a past posting, but I couldn't find anything that answered my question in the archives. I'm looking to do a migration from WinNT4.0 Domain controllers to Samba 3.0 servers as Domain Controllers with LDAP. We have 3 NT domains (Red, Black, Green) in 3 separate sites with 2-way trusts between each Domain. We currently don't have LDAP in place except for the instance on Lotus Domino (I'll get to that later), and would we'd like to use OpenLDAP. Reading up on implementing Samba with LDAP, it seems that the best practice is having the LDAP Master servers running on the PDCs and LDAP Slave servers on BDCs. (Now this is where my lack of LDAP knowledge has me stuck.) Does it make sense to keep the NT Domain structure (3 Domains) Create one LDAP domain (using the Internet Naming Schema) dc=uhuru dc=com, and have the NT Domains correspond to Organizational Units: Red, Black,& Green. Will that level of granularity get in the way if I wanted to have the Lotus Domino server use OpenLDAP for its address book? Should that OU level of granularity be used at all for Samba? Does the Windows' NT Domain Model still make sense in lieu of LDAP and Samba, and does that Samba friendly LDAP setup still allow for such things as solaris and linux automounting (replacing nis), and allowing Domino addressbook lookups for authentication and messaging. any insight into this project would be much appreciated. (I am also sending this to the ldap group as well -as many of the questions are ldapcentric) --==\8 \< Do you Yahoo!? Yahoo! Mail - More reliable, more storage, less spam