[Samba] Winbind: login "cannot find name for group ID XXXXX" ONLY RedHat 8

[Chris de Vidal]

My RedHat 8.0 workstation doesn't want to play nice
with Winbind.  The rest of our Samba servers (on
RedHat 7.3) are working fine, and I am familiar with
setting up Winbind.

Samba: 2.2.7a (RPM from Samba.org.  RedHat's RPMs do
same thing.)
Kernel 2.4.20
NT 4 domain

I'd copied the pam and smb.conf from a working box in
testing.  Getent passwd and group works, BUT getent
group 'Domain Users' does not (perhaps this is
related??).  However, getent group | grep 'Domain
Users' works.  getent group <any other group> works.

[supcd at us05201637 supcd]$ testparm | grep winbind
'winbind separator = +' might cause problems with
group membership.

        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind separator = +
        winbind cache time = 15
        winbind enum users = Yes
        # No did the same thing)
        winbind enum groups = Yes
        # No did the same thing)
        winbind use default domain = Yes
[root at us05201637 root]# su - supcd
id: cannot find name for group ID 10003
[supcd at us05201637 supcd]$ groups supcd
id: cannot find name for group ID 10003
id: cannot find name for group ID 10001
id: cannot find name for group ID 10006
id: cannot find name for group ID 10019
id: cannot find name for group ID 10018
[supcd at us05201637 supcd]$ getent group 'Domain Users'
[supcd at us05201637 supcd]$ getent group 10003
[supcd at us05201637 supcd]$ getent group | grep 10003
Domain Users:x:10003:Administrator,supml,supcd...(87
usernames snipped)
[supcd at us05201637 supcd]$ getent group 'Domain Admins'
Domain Admins:x:10001:Administrator,supcd... (10
usernames snipped)
[supcd at us05201637 supcd]$ getent group 10001
Domain Admins:x:10001:Administrator,supcd... (10
usernames snipped)

(Logging into RedHat 7.3 box in same domain; no error
on login)
[supcd at hjx-graphics-01 supcd]$ groups supcd
supcd : Domain Users Domain Admins

Ideas?  I can provide more info (e.g. pam files) on
request.
/dev/idal

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com