[Samba] Winbind missing secondary groups depending on case & distro

Chris Smith
2007-02-13T23:32:20Z

On Tuesday 13 February 2007, Roger Prefontaine wrote:
> On the Ubuntu server, "id DOMAINNAME+David", "id
DOMAINNAME+david", and "id
> David" only list the primary group, and "id david" lists all
groups. ?All
> of these combinations produce all groups on the CentOS server.

>	winbind use default domain = Yes

May not be much help but out of curiosity I tried the same test on a Samba
server that is also a member of an NT4 domain. It is running 3.0.24 plus the
6 Vista patches on a Gentoo server.

I don't use the "winbind use default domain = Yes" in smb.conf,
but I did test
that way as well. Also I didn't change the default seperator.

With the "normal" setup (winbind use default domain = No):
--------------------------------------
id DOMAINNAME\\username - shows all groups

id DOMAINNAME\\USERNAME (or any permutation with a cap in the username) - only
primary group

id username - returns "No such user"

id USERNAME (or any permutation with a cap in the username) - returns "No
such
user"
--------------------------------------

If I set "winbind use default domain = Yes" then:
--------------------------------------
id DOMAINNAME\\username - only primary group

id DOMAINNAME\\USERNAME (or any permutation with a cap in the username) - only
primary group

id username - shows all groups

id USERNAME (or any permutation with a cap in the username) - only primary
group
--------------------------------------

Chris

EDITED to add the other cases (id USERNAME).