samba - Sep 2006 - winbindd and groups

Hello,

I'm having problems with group consistencies between my samba server
and a trusted domain.

I'm running 3.0.23b with my samba server a member of an NT domain,
which in turn trusts another domain (AD mixed mode).

The AD admin added a user into a group, but my samba server sees the
user as being added to a different group.

Any ideas?

Regards,
Franz

Hello Peter,

Thanks for your message.  I'm using GNU/Linux with kernel 2.4.31.

Here's the output from wbinfo -r
10000
10001
10002
10004
10008
10020
10034
11847
11928
12171
12681
12682
12694
12835
12836
13053

My group range in winbindd is 10000-20000

Output of id is:
uid=17686(WHO-HQ-1\lamoureuxc) gid=10000(WHO-HQ-1\domain users)
groups=10000(WHO-HQ-1\domain users)

Checking on the group membership of the problematic user, I now see that
she is in the correct group, but she is still listed as a member of the other
group (the incorrect one).

To check group functionality in the local domain, I added the user to a group,
and sent HUP to winbindd so that it will empty its cache.  wbinfo still does
not list her as a member of that group.

Regards,
Franz

Dear Franz,

> I'm having problems with group consistencies between my samba 
> server and a trusted domain.
> 
> I'm running 3.0.23b with my samba server a member of an NT 
> domain, which in turn trusts another domain (AD mixed mode).
> 
> The AD admin added a user into a group, but my samba server 
> sees the user as being added to a different group.
Which operating system are you using?

Could you please provide the output of  
wbinfo -r UserInProblem

and

id UserInProblem 

?


Could you please check also that samba correctly handles group membership
within its domain?



With best regards,
P. Trifonov