[Samba] winbind - users missing from groups

[Chris Coffey]

Hello All! 

I'm pulling my hair out as I cannot figure out why I'm missing users
from many groups after integrating and re-integrating over and over. 
Example, AD group: Domain Users, has 400 users in it , but after
integrating and performing command: 

[EMAIL PROTECTED] samba]# getent group | grep "Domain User"
COF+Domain Users:x:16777223:COF+gisguest

Check it out one user!  Also I do a: getent group | grep "Domain
Admin"
and I'm missing and like 2 other admins are missing from the group.

At this point I'm not sure whether I'm missing groups, or just users
from groups.  But this will not due having missing users.


Weird logs that may mean something to you:

winbindd.log:

[2006/08/10 08:08:43, 1]
nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist

Is winbind trying to authenticate as  root intead of Administrator of
the domain?

[2006/08/10 08:13:44, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(764)
  Kinit failed: Client not found in Kerberos database

Also ...

[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Pre-Windows 2000 Compatible Access !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Guests !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Backup Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Print Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Account Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Replicator !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Server Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Users !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
  No rid for Administrators !?



Please help, I would really appreciate it, thanks! :)

Chris Coffey
Application Support Specialist
Information Technology
928-779-7685 x7204