Hi i thinks that he have a cache for "getent group" no ? I don't see immediatly the modification of my active directory, only when i restart winbind ... he have a command ligne for flush the cache ? thanks