Yah, it's definitely one or the other on XServe. But hey, they had to make it so graphics department staffers could manage LDAP.... right??? (please read in my sarcasm)