Hello. I use pam_winbind to authenticate users against the domain. Winbind is configured to use idmap_rid backend to guarantee consistent mapping between UIDs and SIDs. Everything works perfect, but I need the domain users to be the members of some local UNIX groups (like plugdev and floppy). Is there a way to manually map some domain groups to local groups keeping UID mapping via idmap_rid inact? Or maybe there is another way to solve the problem in question? -- Best regards, Ilya Paramonov