After a restart, I'm seeing all the userid's change. Which I thought idmap_rid was supposed to prevent. I see this in log.winbind from an ls -l. [2006/10/02 17:20:52, 1] nsswitch/winbindd_group.c:winbindd_getgrgid(340) Can't find domain from sid Any ideas what's happened? wbinfo -u and -g seem to work # wbinfo -u | wc -l 28724 # wbinfo -g | wc -l 13270 Thanks, Graham samba-3.0.20b on FreeBSD 5.3-RELEASE-p9 # Global parameters [global] workgroup = HARRIS security = ADS netbios name = ATARASHII encrypt passwords = yes realm = CS.MYHARRIS.NET password server = wtldc1vm.cs.myharris.net wins server = 137.237.104.156 client schannel = no allow trusted domains = No idmap backend = idmap_rid:HARRIS=10000-300000 idmap uid = 10000-300000 idmap gid = 10000-300000 winbind separator = . template homedir = /home/%U template shell = /bin/sh winbind cache time = 3600 winbind nested groups = Yes winbind use default domain = Yes winbind enum users = No winbind enum groups = No force create mode = 0666 force directory mode = 0777 dos filemode = Yes server string = Samba File Server %v map to guest = Bad User