Hi Surely this is the same stuff that eg 'wbinfo -g' pulls out? I believe the only issue I've seen is a segfault when the group list was very large. However, if the change is that you can only get group membership after the auth then that's okay as we use that for vlan assignment alan