Hi server: Ubuntu 12.04 samba4 DC running winbindd client: Ubuntu 12.04 samba 3.6.6 client smb.conf: realm = polop.site workgroup = POLOP security = ADS wide links = Yes unix extensions = No template shell = /bin/bash winbind enum users = Yes winbind enum groups = Yes idmap uid = 300000-400000 idmap gid = 20000-30000 The client is joined to AD and users can login. But, for example, a user does not correspond to the 300000-40000 range set: POLOP\joseph-p:*:20003:20000:joseph-p:/home/POLOP/joseph-p:/bin/bash I've cleared winbindd_idmap.tdb from winbindd_idmap.tdb on the client and restarted winbind and nscd is stopped. What am I doing wrong? Cheers, Steve