Hi I've understood that sssd still isn't fully tested against an Active Directory? We've got one and I'm trying to make an Ubuntu linux client to work with it by using samba, MIT krb5 libs and sssd. Things aren't going too strong though. AD seems to support only HOST$ -style principals and not SPN's, but even if I specify ldap_sasl_authid to that I only get an "Invalid credentials" when the daemon is trying to bind [sssd[be[AALTO]]] [sasl_bind_send] (4): Executing sasl bind mech: GSSAPI, user: NEXUS6$ [sssd[be[AALTO]]] [sasl_bind_send] (1): ldap_sasl_bind failed (49)[Invalid credentials] So, am I missing something or is there something to be fixed :) -- Timo Aaltonen Systems Specialist IT Services, Aalto University School of Science and Technology