An additional hint: If you try to reproduce this, deinstall nscd. nscd will cache user database info so libnss_ldap is not called, thus, everything suddenly works, most of the times (but not always). Moritz