When importing users, the uid attribute is not copied. I think this is an important attribute if Unix logins are required. cn= can't really be used as a substitute (as cn has set value AFAIK). When importing groups, it loses the Unix name (cn) of the group, and uses either the displayName or description instead, e.g. Source group: # ca_sys_integration, group, vpac.org dn: cn=ca_sys_integration,ou=group,dc=vpac,dc=org sambaGroupType: 2 displayName: Systems Integration cn: ca_sys_integration objectClass: posixGroup objectClass: sambaGroupMapping sambaSID: S-1-5-21-1268321594-3481289969-4150125466-21087 gidNumber: 10043 description: Systems Integration Destination: # Systems Integration, Users, ad.vpac.org dn: CN=Systems Integration,CN=Users,DC=ad,DC=vpac,DC=org cn: Systems Integration description: Systems Integration instanceType: 4 whenCreated: 20121115070939.0Z whenChanged: 20121115070939.0Z uSNCreated: 3913 name: Systems Integration objectGUID:: tGru9koTAU+Oe3sHYvmOgA== objectSid:: AQUAAAAAAAUVAAAAOg2ZS/FEgM+a4133X1IAAA== sAMAccountName: Systems Integration sAMAccountType: 268435456 groupType: -2147483646 objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=ad,DC=vpac,DC=org gidNumber: 10043 objectClass: top objectClass: posixGroup objectClass: group msSFU30NisDomain: vpac uSNChanged: 3916 distinguishedName: CN=Systems Integration,CN=Users,DC=ad,DC=vpac,DC=org it has lost the cn=ca_sys_integration