Problems creating a Samba4 LDAP Backend

Michael Ströder michael at
Sat Mar 22 11:03:24 GMT 2008

Andrew Morgan wrote:
> I noticed that the memberOf tab in AD Users and Computers does not show 
> group membership for groups that are not in the same domain as the user. 
> Access controls were still correctly applied though, so those interfaces 
> must be enumerating group membership some other way.

How about the 'tokenGroups' attribute? Samba would have to emulate this too.

Ciao, Michael.

More information about the samba-technical mailing list