[Samba] Duplicate entries in winbindd_idmap.tdb

[tom.regan at dpi.nsw.gov.au]

G'day Folks,

We are having problems with numerous duplicate entries in 
winbindd_idmap.tdb
resulting in the available userid range set in smb.conf being quickly and 
repeatedly exhausted.
The duplicate entries all appear to have a WBA_PASSWD key, e.g

{
key = "WBA_PASSWD/UID/9945\00"
data = "nexxxo01\00"
}
{
key = "WBA_PASSWD/UID/9720\00"
data = "nexxxo01\00"
}
etc...

Users are being authenticated against a Windows 2003 DC via winbind, with 
smb.conf config being:
[global]
        workgroup = XXXRES
        security = DOMAIN
        password server = aserver.adomain
        log level = 1
        ldap ssl = no
        winbind uid = 1000-10000
        winbind gid = 500-2000
        winbind separator = +
        winbind use default domain = Yes
        winbind enum users = yes
        winbind enum groups = yes

and nsswitch.conf entries:
        passwd:     files winbind
        group:      files winbind

getent passwd nexxxo01returns a single entry for this user:
        nexxxo01:x:1694:1079::/data1/XXXRES/nexxxo01:/bin/bash

There are only two entries in winbindd_idmap.tdb for uid 1694:
{
key = "UID 1694\00"
data = "S-1-5-21-621575563-1972833152-631647523-5009\00"
}
{
key = "S-1-5-21-621575563-1972833152-631647523-5009\00"
data = "UID 1694\00"
}


Has anyone else experienced this problem and found the cause?
(OS is Solaris 9, Samba 3.0.10 (will be upgrading to 3.0.14 shortly)
My apologies if this is an RTFM - a pointer to any documenation would also 
be welcome.

MTIA,
Tom

 --
Tom Regan, Host Integration Manager
NSW Department of Primary Industries 
Orange NSW Australia
Email:Tom.Regan at dpi.nsw.gov.au
Phone: 61 0263 913268 
Fax:   61 0263 913290



This message is intended for the addressee named and may contain 
confidential information. If you are not the intended recipient or 
received it in error, please delete the message and notify sender. Views 
expressed are those of the individual sender and are not necessarily the 
views of their organisation.