Hello, I have the following problem: - samba is a member of a w2k domain (samba version 2.2.8a, compiled from tarball on RedHat9) - winbind works ok, no problems - domain users, when connecting through my samba, don't get their local group membership info (only domain groups are initialized). - domain users, when connecting through any other pam-enabled service, get their group membership info ok (both domain groups and local groups). This I traced to the fact that in source/nsswitch/wb_client.c, function winbind_initgroups, it only uses winbind to get group information, avoiding the use of initgroups for non-local users. Are there any reasons to avoid initgroups for domain users? I'm thinking of changing wb_client.c to always go with initgroups, but maybe there are reasons to use winbind. The windows domain is not that big that enumeration of groups would be too expensive (<2000 users, <500 groups). Or is it possible to get full group information through other changes? Any hints on this issue would be appreciated. Thanks, Iustin Pop