Some temporary work-around was found for bug #4075 (users/groups mapping in combined NSS (ldap, ypbind) and Samba domain). See https://bugzilla.samba.org/show_bug.cgi?id=4075 (in hope that it can be useful for somebody). ~buc http://www.fedoraproject.org/wiki/DmitryButskoy