aare you sure that is necessary? i add local4.debug /var/log/ldap and restart syslog that creates volumes sof logs to read i tohught smab was smart enough now to make thata no isue..we are using scads of xp machines with no hack chuck