I get the following errors when I try to remove group from a user with usrmgr smb_create_group: Running the command `/usr/local/sbin/smbldap-groupadd -p 'test'' gave 111 [2006/10/20 19:53:29, 0] groupdb/mapping.c:smb_delete_user_group(1087) smb_delete_user_group: Running the command `/usr/local/sbin/smbldap-groupmod -x hmiller' 'hsstaff'' gave 2 I am running redhat es3 with samba 3.0.22 with ldap backend. Any ideas? Here is the Global part of my smb.conf Thanks in advance! -Glenn [global] interfaces = eth* netbios name = Server workgroup = Domain server string security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes ldappasswd sync =yes passdb backend = ldapsam:ldap://server.somewhere.com ldap admin dn = cn=samba,ou=DSA,dc=somewhere,dc=com #ldap admin dn = cn=Manager,dc=somewhere,dc=com ldap suffix = dc=somewhere,dc=com ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap idmap suffix = ou=Users ldap ssl = no unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = no wins server = 10.100.0.10 #veto files = /*.eml/*.nws/ lanman auth = yes add user script = /usr/local/sbin/smbldap-useradd -m '%u' delete user script = /usr/local/sbin/smbldap-userdel '%u' ldap delete dn = yes add group script = /usr/local/sbin/smbldap-groupadd -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel '%g' add machine script = /usr/local/sbin/smbldap-useradd -w '%u' add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g' delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u' '%g' set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u' dos charset = 850 unix charset = ISO8859-1 oplocks = yes load printers = yes ;default devmode = yes printing = cups force printername = yes idmap uid = 15000-20000 idmap gid = 15000-20000 winbind separator = - winbind use default domain = No enable privileges = yes eventlog list = Application System Security SyslogLinux log level = 1 admin users =@"Domain Admins" ;map acl inherit = Yes