mathias dufresne
2025-Mar-18 10:53 UTC
[Samba] [Winbind] group membership with unidirectional trust relationship
Hello, I configured Winbind to access several AD domains on a member server. For users belonging to an AD domain with a bidirectional trust relationship, all groups for these users are retrieved. For users belonging to an AD domain with a unidirectional trust relationship, these users have only two groups: "Domain User" and the group built from username. I'm wondering if I missed something in my configuration or if this is a normal behavior, a limitation in Winbind while accessing domains with unidirectional relationships. Best regards, Mathias
mathias dufresne
2025-Mar-18 11:28 UTC
[Samba] [Winbind] group membership with unidirectional trust relationship
I'm really sorry, my previous thoughts were wrong. Just forget about it. I believe my issue comes from our ADs and how the groups are configured. Please, accept my apologies about the noise. Le mar. 18 mars 2025 ? 11:53, mathias dufresne <infractory at gmail.com> a ?crit :> Hello, > > I configured Winbind to access several AD domains on a member server. > For users belonging to an AD domain with a bidirectional trust > relationship, all groups for these users are retrieved. > For users belonging to an AD domain with a unidirectional trust > relationship, these users have only two groups: "Domain User" and the group > built from username. > > I'm wondering if I missed something in my configuration or if this is a > normal behavior, a limitation in Winbind while accessing domains with > unidirectional relationships. > > Best regards, > > Mathias >