samba - Aug 2009 - Problems with groups using samba + ldap

Hi,

I'm using Ubuntu 8.04 with samba 3.028a (ubuntu package) +LDAP and I'm
getting an odd problem.

I have a user and this user had 4 groups (1 principal and 3 complementary)

if I run id <user> in the console of samba server the command returns 4
groups (so LDAP is working fine).

But when I'm trying to access a samba share (with log level 5), I noticed
that samba returns that the user had 12 complementary groups (he had before,
but now we changed to just 4, and one of them is a new group that doesn't
appear in this list)

Is there some cache that I can flush ? I tried net cache flush but the
problem persist.

Anybody can help me ?

Regards,

Marcelo H. Terres
mhterres at gmail.com
****************************************
ICQ: 6649932
MSN: mhterres at hotmail.com
Jabber: mhterres at jabber.org
http://twitter.com/mhterres
http://identi.ca/mhterres
http://mhterres.jaiku.com/
****************************************
http://mundoopensource.blogspot.com/
http://offtopicsandfun.blogspot.com/
http://www.propus.com.br

A little debug about it:

samba log:

[2009/08/31 16:24:21, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 4422
  Primary group is 513 and contains 12 supplementary groups
  Group[  0]: 513
  Group[  1]: 2129
  Group[  2]: 512
  Group[  3]: 544
  Group[  4]: 548
  Group[  5]: 549
  Group[  6]: 550
  Group[  7]: 551
  Group[  8]: 552
  Group[  9]: 2037
  Group[ 10]: 2134
  Group[ 11]: 2141

id fotanus
uid=4422(fotanus) gid=513(Domain Users) groups=513(Domain
Users),2129(dadmins),4352(coord_tds),2141(proxy_Total)

This is very strange...

Regards,

Marcelo H. Terres
mhterres at gmail.com
****************************************
ICQ: 6649932
MSN: mhterres at hotmail.com
Jabber: mhterres at jabber.org
http://twitter.com/mhterres
http://identi.ca/mhterres
http://mhterres.jaiku.com/
****************************************
http://mundoopensource.blogspot.com/
http://offtopicsandfun.blogspot.com/
http://www.propus.com.br
Sent from Porto Alegre, RS, Brazil

On Mon, Aug 31, 2009 at 6:15 PM, Marcelo Terres <mhterres at gmail.com>
wrote:
> Hi,
>
> I'm using Ubuntu 8.04 with samba 3.028a (ubuntu package) +LDAP and
I'm
> getting an odd problem.
>
> I have a user and this user had 4 groups (1 principal and 3 complementary)
>
> if I run id <user> in the console of samba server the command returns
4
> groups (so LDAP is working fine).
>
> But when I'm trying to access a samba share (with log level 5), I
noticed
> that samba returns that the user had 12 complementary groups (he had
before,
> but now we changed to just 4, and one of them is a new group that
doesn't
> appear in this list)
>
> Is there some cache that I can flush ? I tried net cache flush but the
> problem persist.
>
> Anybody can help me ?
>
> Regards,
>
> Marcelo H. Terres
> mhterres at gmail.com
> ****************************************
> ICQ: 6649932
> MSN: mhterres at hotmail.com
> Jabber: mhterres at jabber.org
> http://twitter.com/mhterres
> http://identi.ca/mhterres
> http://mhterres.jaiku.com/
> ****************************************
> http://mundoopensource.blogspot.com/
> http://offtopicsandfun.blogspot.com/
> http://www.propus.com.br
>