samba - Apr 2012 - Strange groups problem with 2003 AD

I've searching the archives for 2 hours and cannot find somebody else
with the same problem, so please don't kill me if this is a stupid
question..

I instaled a Centos 5 Machine with the Samba3x packages of samba and winbind
and joined it to a 2003 AD server domain. Do far, so good.

wbinfo -t works
wbinfo -u, -g works
getent passwd and group also work.

buuuuuuuuuuuut, groups are missing members and users are missing groups.

Its very strange, and looks like somewhere a cache of user/group ids
and mappings
is frozen in time. I tried deletting all the tdb files, leaving and
rejoining the domain,
givind -n to winbind to disable cache and nothing works.

nscd is off, so is iptables and selinux.

Any ideas?

Thanks,


-- 
Eduardo Kaftanski
eduardo at kdi.cl
ekaftan at gmail.com

I'm seeing similar issues.

    add a new member to a group in AD using windows "Active Directory
Users and Computers"
    'getent group groupname'  shows the new member

fine.
buuuut (love that spelling), 'groups newmember' doesn't show the
groupname membership.

I'm running on RHEL-6.2, samba 3.5.10.

Has anyone besides Eduardo and I run into this?

 _Gary


On 04/23/2012 09:36 AM, Eduardo Kaftanski wrote:
> I've searching the archives for 2 hours and cannot find somebody else
> with the same problem, so please don't kill me if this is a stupid
> question..
>
> I instaled a Centos 5 Machine with the Samba3x packages of samba and
winbind
> and joined it to a 2003 AD server domain. Do far, so good.
>
> wbinfo -t works
> wbinfo -u, -g works
> getent passwd and group also work.
>
> buuuuuuuuuuuut, groups are missing members and users are missing groups.
>
> Its very strange, and looks like somewhere a cache of user/group ids
> and mappings
> is frozen in time. I tried deletting all the tdb files, leaving and
> rejoining the domain,
> givind -n to winbind to disable cache and nothing works.
>
> nscd is off, so is iptables and selinux.
>
> Any ideas?
>
> Thanks,
>
>