Also for creating groups I've tried to mimic the http://techtasks.com/code/viewbookcode/1616 and:
use constant ROOTDN => 'OU=NIS Groups,DC=internal,DC=mycompany,DC=com'; use constant ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP => 4; use constant ADS_GROUP_TYPE_GLOBAL_GROUP => 2; use constant ADS_GROUP_TYPE_LOCAL_GROUP => 4; use constant ADS_GROUP_TYPE_SECURITY_ENABLED => -2147483648; use constant ADS_GROUP_TYPE_UNIVERSAL_GROUP => 8; ............ my $result = $ldap->add($dn, attrs => [ msSFU30Name => $Name, msSFU30GidNumber => $GidNumber, msSFU30NisDomain => 'internal', #msSFU30PosixMember => $members, #objectCategory => 'Group', #objectClass => [ qw(top person organizationalPerson group) ], samAccountName => $Name, groupType => ADS_GROUP_TYPE_LOCAL_GROUP | ADS_GROUP_TYPE_SECURITY_ENABLED, description => '', ] ); But get: 00000057: LdapErr: DSID-0C090B38, comment: Error in attribute conversion operation, data 0, vece Regards Alex