OK. I reinstalled Squeeze & ran the subnet-change tool with root password, then rebooted. System has been running for a couple of hours now, it still accepts the LDAP login, and thin clients can connect. Next week is a school holiday in UK, and I hope we can figure out steps to convert o200 or so existing users Many thanks for all your help, John