Hi, why not using only Kerberos and {ldap,samba}-krb5 backends ? Both are available, AFAIK. Maybe a Jessie proposal ;-) Regards Giorgio -- Sysadmin SPSE-Tenero Ufficio: +41 91 735 62 48 Cellulare: +41 79 629 20 63