samba - Jan 2012 - winbind and group membership

Hi.

FreeBSD 8.2
Samba 3.5.11 from ports

I have an issue with group membership. id shows only small part of the 
groups a user is member of. I'm aware about UNIX max group issue, but 
this isn't related to it - for example for a user which is member of the 
6 griups id shows only 3. Although wbinfo -r shows correct number of 
groups and wbinfo -G is able to successfully translate UNIX group to a 
domain SID.

Can this be solved somehow ?
I tried the 3.6.1 from ports, but using it's nss_winbind.so id only 
shows primary group for mapped users and none for system users existing 
in the domain.

For example:

[emz at witchdoctor:/var/db/samba]# id emz
uid=1001(emz) gid=0(wheel) groups=0(wheel),20007(?????????????? 
??????),20100(warez-rw),20248(internet users - panicbox),20413(internet 
users - samara),20456(internet users - crystal)
[emz at witchdoctor:/var/db/samba]# wbinfo -r emz
20002
20459
20456
20100
20547
20413
20007
20248
20009
20692
20587
20695
20693
20694
20585
20652
20584
20621
20613
20649
20590
20654
20664
20657
20612
20586
20001
20000
[emz at witchdoctor:/var/db/samba]# wbinfo -r emz | xargs wbinfo -G
S-1-5-21-3780126066-798514342-2262872178-513
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20002
S-1-5-21-3780126066-798514342-2262872178-513
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20459
S-1-5-21-3780126066-798514342-2262872178-17960
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20456
S-1-5-21-3780126066-798514342-2262872178-17956
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20100
S-1-5-21-3780126066-798514342-2262872178-11860
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20547
S-1-5-21-3780126066-798514342-2262872178-20184
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20413
S-1-5-21-3780126066-798514342-2262872178-17662
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20007
S-1-5-21-3780126066-798514342-2262872178-512
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20248
S-1-5-21-3780126066-798514342-2262872178-15792
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20009
S-1-5-21-3780126066-798514342-2262872178-5934
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20692
S-1-5-21-3780126066-798514342-2262872178-19463
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20587
S-1-5-21-3780126066-798514342-2262872178-13813
[emz at witchdoctor:/var/db/samba]# wbinfo -G 20695
S-1-5-21-3780126066-798514342-2262872178-19466

Thanks.
Eugene.

Having a very similar problem:

I am using pam_winbind to login to a workstation using domain
credentials. The login works fine and the logged-in user
is assigned his primary domain group membership, but not his
secondary domain group membership(s).

Configuration:
- NT Domain
- PDC is Samba Version 3.5.11-79.fc14 running on Linux
  2.6.35.14-106.fc14.i686
- Workstation is Samba Version 3.6.3-78.fc16 running on Linux
  3.2.5-3.fc16.x86_64

Everything appears to be configured properly:
- Domain logins work fine
- "wbinfo -g" lists all the domain groups
- "wbinfo --user-groups=<username>" lists the GIDs mapped to
  all the domain groups assigned to the user
- "getent group" includes all the domain groups and correctly
  shows the domain users assigned to the domain groups

But:
- "groups" and "id" only list the primary group assigned to
the user

If I do "newgrp <secondary_domain_group>" to change to the
secondary
group, then "groups" and "id" show both the primary and
secondary groups.

Am I misunderstanding something and this is the expected behaviour?
I'm fairly certain this used to work as I expect a couple of upgrades
ago (sorry, don't remember Samba version). If not, any suggestions for 
fixing this?

MV