[Samba] Primary and secondary groups concurrently is fine ?

[Javier Barroso]

Hi list,

I'm having trouble in my PDC (Samba+LDAP):

# pdbedit -L userexample1 -v
...
Primary Group SID:    S-1-5-21-2231159823-2458477768-4002084509-41003
...

# net groumap list
example (S-1-5-21-2231159823-2458477768-4002084509-41003) -> example

# getent group example
example:*:20001:

# groups userexample1
example Domain Users

userexample1 has like secondary group "Domain User", so he is a domain user.

$ ldapsearch -x uid=userexample1 -LLL gidNumber
...
gidNumber: 20001

Should I add "memberUnique: userexample1" attribute to example node in
ldap tree (to get getent output correctly)?

Is it like a redundant data is necessary ?

Thank you