Mutilple AD Group resolution using wbinfo

Dave Augustus davea at support.kcm.org
Tue Dec 2 22:56:58 GMT 2003


Hello all,

I am working on getting squid to authenticate to a W2K3 AD setup using
Samba 3 and have run into what appears to be a roadblock. Any insight or
workarounds are most appreciated!

Software setup:
Samba3 compiled with Kerberos 1.3.1 on Redhat 9
Windows 2003 Enterprise running AD (Windows 2003 Functional Level)

My client user is called "surfer" and is in 2 groups: Domain Users and
AuthorizedUsers.

Show the list of groups that "surfer" is a member of:

wbinfo -r surfer

returns:
10005  (which is the group for Domain Users)


Shouldn't I see the other group listed as well?


Doing: 
wbinfo -n "AuthorizedUsers" 

returns:
S-1-5-21-2746575337-427122046-3347170240-1134 4

Then,
wbinfo -Y "S-1-5-21-2746575337-427122046-3347170240-1134 4"

returns:
10017

Shouldn't this number be listed as well?

Thanks,
--Dave Augustus




More information about the samba-technical mailing list