On Thu, Oct 2, 2008 at 11:17, Craig White <craigwhite at azapple.com> wrote: > add this to the bottom of /etc/ldap.conf > > timelimit 30 > bind_timelimit 30 > bind_policy soft > nss_initgroups_ignoreusers root,ldap Personally, I use a longer list or users: nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus I've collected those in trying to speed up the startup of other daemons. I'm not sure if all of them are still relevant, but in any case I think it's a good idea to configure this for users that you know for sure they are in /etc/passwd and not in LDAP. HTH, Filipe