search for: rcf2307

...ind enum groups = Yes winbind use default domain = true template shell = /bin/bash template homedir = /home/%D/%U machine password timeout = 2592000 realm = CME.COM use kerberos keytab = yes password server = prod-srv-8.cme.com nt acl support = yes map acl inherit = yes winbind nss info = rcf2307 allow trusted domains = no [CME] path = /storage/CME writeable = yes inherit acls = yes inherit permissions = yes security mask = 0770 force security mode = 0770 directory security mask = 0770 force directory security mode = 0770 force create mode = 0770 map archive = yes store dos at...

...is incorrect then really this whole email is a little moot; however, I thought of my objections to which attribute were being queried before I thought of the group membership issue on client machines. I propose that the combination of "idmap_backend = ad" and "winbind nss info = rcf2307" be changed to actually look at the rfc2307 group attributes instead of the windows group attributes. I have just started to wrap my mind around the complexities of posix<->windows mapping, and I look forward to any response that expand my understaning. Thanks, Neal