Hi, there was a mistage in my "graphik". Here's the correct one : It shall work like this. Windows authetification UNIX authetification | ^ | | | -------------- |> Samba <- | | | | |-> LDAP<|<------ | ^ |> KERBEROS | Authentification (UNIX just uses LDAP (via PAM)) and not Samba (as Windows does). greets Harry