On 08/11/2016 14:40, Alexander Nedotsukov wrote: > Does it help if you add "nss_schema rfc2307” to nss_ldap.config? Did the default change to rf2307bis? Anthony Pankov: Are your using groups of DNs or groups of uids? -- Jan Bramkamp