Hi, I use alias object in my DIT tree. However, I notice SAMBA server configure to work with LDAP never dereference the object in the ldap.log file: Feb 10 23:25:59 deer slapd[7289]: conn=122 op=171 SRCH base="ou=samba,dc=estream,dc=com,dc=my" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=500))" The deref is always = 0. I have set the "DEREF always" in ldap.conf but I don't think it is related. The deref should be samba's request. I didn't find any related setting in smb.conf. Any ideas? Please advice. Thank you. -- Best regards, Chau Chee Yang E Stream Software Sdn Bhd URL: www.sql.com.my SQL Financial Accounting