Hello. We too, are using nss LDAP. We have it authenticating without the /etc/passwd pretty well, but we can't seem to get finger to work for all the entries. Is there something specail you have to do in the .ldif, or somewhere else to get it to work?