> Just in case, you also did "svcadm refresh idmap" after changing SMF > service properties and before restarting the service, right? ;) I think so, although you've got me wondering now. Although saying that, it's appearing correctly in the idmap database, so presumably I did and that should be in effect anyway? James.