On Thu, 28 Apr 2011, Benjamin Hackl wrote: > On Thu, 28 Apr 2011 16:21:58 +0200 > "Mattias Geniar" <mattias at nucleus.be> wrote: > >> Here's my /etc/ldap.conf file: > > Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf? > > nss_initgroups_ignoreusers root,ldap This works: nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus -Steve