Hi all, I'm trying to extend the schema on my Samba4 setup by adding apple's schema. I followed the instructions from https://wiki.samba.org/index.php/Samba4/Schema_extenstions and http://blog.michael.kuron-germany.de/2011/02/active-directory-mac-os-x-mcx/ (I think this is a modified apple.schema but I haven't found the original yet) and have got it to import the schema OK (I had to remove the class rDNAttID for all the classes). I'll post my notes on it presently... My question is - how do I know this hasn't done anything disastrous? It all looks OK given 5 rigorous minutes of testing but extending schema on AD is generally considered foolhardy as far as I can see. What could go wrong in the future? And what is this about rDNAttIds? Is this a difference/potential incompatibility/something to watch out for between samba4 and MS AD? For instance, if I had a MS AD domain with apple extensions, would this cause any more problems adding a samba4 DC? thanks again, Jim