"getent group" shows both domains group and domain users - winbind bug ?

[Tim Potter]

Roberto Sebastiano writes:

> I installed winbind and after some trouble all (?) worked fine, but I
> had a problem with lprng.. lpq -a takes 7.5 seconds to execute with the
> group winbind in /etc/nssswitch.conf, less than 1 second with group
> files .. so I investigated a bit, this is what I found.
> 
> Maybe a bug ?

We had a discussion about this on irc last night.  My theory is
that lpq is doing a full enumeration of all groups on the system,
probably to determine which groups the user is a member of.  You
seem to have a large number of users and groups on your NT PDC.

One solution is to disable group enumeration with 'winbindd enum
groups = false'.  Another is to fix the group caching code which
I broke ages ago and it was too hard to fix.  )-:  The last
solution is to recode lpq so it doesn't enumerate all groups.


Tim.