[Samba] Problem with LDAP groups and associated file permissions

[Manuel Graumann]

Hi folks!

Our smb with LDAP PDC now seems to be nearly completed. Just now we found
out something very mysterious. We organized some directorys to be used by
specific domain groups. If we put a user into a group the user is allowed to
access the associated share. So far this works pretty nice.

If we remove the user from the domain group the user seems to keep all his
rights he got from his group membership we removed - even after loggin off
and on again and restarting smb and nmb. This seems to me a very strange
behaviour. Any ideas where we have to look?

Client OS: XP Pro SP 2
Server: openSuse 10.1 64 bit, Samba 3.0.22-13.18, openldap2 2.3.19-18.10,
smbldap-tools 0.9.1-11

Any hint would be nice.

Regards

Manuel