"getent group" shows both domains group and domain users - wi nbind bug ?

[Tim Potter]

Mayers, Philip J writes:

> This is a common problem with network NSS modules (LDAP has the same
> problem). The correct fix is for lpq to use "getgrouplist" which is present
> on the free BSDs and linux with glibc>=2.2.4 - the latter will use the
> initgroups_dyn NSS hook to boost performance. Does nss_winbind implement
> this hook cheaply?

Yes - the _nss_winbind_initgroups() function calls the msrpc
getusergroups function.


Tim.