[Samba] ldapsearch and getent passd/group with nss winbind differs

[Andreas Ladanyi]

Hi,

after deleting winbindd_idmap and winbindd_cache.tdb files:

For security =domain AND security=ADS !

wbinfo -u /-g /-t are ok !

getent passwd is ok.

getent group shows different group memberships as ldapsearch with filter 
"msSFU30PosixMemberOf".

smb.conf - winbind:

winbind separator = /
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 60
idmap backend = ad
idmap uid = 6000-27000
idmap gid = 600-7000
template shell = /bin/bash
template homedir  = /home/%u
winbind use default domain = yes
winbind refresh tickets = yes
winbind nss info =  template sfu

Any ideas ?

Andy