I have tried everything I can to find a solution to this.  I can wbinfo
-g or -u or even -n but when I try to use
Wbinfo -r to get the group of a user it fails and gives this error
 
Could not get groups for user XYZ
 
Any ideas would be most appreciative.   My smb.conf config follows..
Also I don't know if this has any merit to this problem but getent group
doesn't pull back anything except the builtin group in ADS
 
 
[global]
        workgroup = DOMAIN
        realm = DOMAIN.LOCAL
        server string = Squid Proxy
        security = ADS
        client schannel = No
        allow trusted domains = No
        password server = XXX.XXX.local
        passdb backend = tdbsam
        log level = 12
        preferred master = No
        idmap domains = VALTIM
        idmap backend = idmap_ad
        idmap alloc backend = tdb
        idmap uid = 10000-300000000
        idmap gid = 10000-300000000
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind trusted domains only = Yes
        idmap alloc config:range = 10000 - 300000000
        idmap config VALTIM:range = 10000 - 300000000
        idmap config VALTIM:default = yes
        idmap config VALTIM:backend = ad
        idmap config VALTIM:schema_mode = rfc2307
        cups options = raw
 
 
 
-------------------------
Brian Fertig