winbind 3+4: different behavoiur with "winbind use default domain = yes"

[Thomas Mueller]

Am Thu, 06 Sep 2012 13:26:12 +0000 schrieb Thomas Mueller:

> hi
> 
> still experimenting with samba4. :)
> 
> on the server with winbind4 (on the server dc1, wheezy with samba4 git)
> and "winbind use default domain = yes" in smb.conf I see not the same
> behaviour as with winbind3 (on the workstation wks, centos 6).
> 
> wks#> id user uid=10021(user) gid=10049(g_user) groups=10049(g_user)
> 
> dc1#> id user uid=10021(DOMAIN\user) gid=513(Domain Users)
> groups=513(Domain Users)
> 
> so the server looks up "user" and gets DOMAIN\user back. Seems that
> "winbind use default domain = yes" is partly working.
> 
> Antother difference is that not both are using the windows primary group
> as the unix default group. s4 smb.conf contains "idmap_ldb:use rfc2307 =
> yes" and s3 smb.conf "winbind nss info = rfc2307". So one is using
> gidNumber and the other primaryGroupID.

primaryGroupID/gidNumber problem was a missconfiguration by me. got an 
error in nsswitch.conf on the wks. The first one seems to be still valid.

- Thomas