[Samba] wbinfo: different groups on different machines

[Haas, Holger]

Hello samba users,
 
i have a strange problem on two squid proxy servers with ntlm
authentication against a windows 2003 AD.
The proxy servers are in domain "DomA". Some users are in domain "DomB",
which is a trusted domain.
Only users who are members of the Group "DomA\InternetAccess" are
allowed to use the proxy servers.
This works well for all users in DomA, but not for some users in DomB.
 
I debugged the problem up to the point that the proxy 1 sees another
group membership for some users of DomB than proxy 2, i.e. the command
 
# wbinfo -r DOM2\\USERFOO | xargs -n 1 wbinfo --gid-info
 
gives different outputs on the two proxy servers.
 
Both servers are members of DomA, both have identical samba and kerberos
configuration.
Can anyone shed light?
 
(samba/winbind: 3.4.0 on ubuntu 9.10)
 
 
Thanks in advance,
Holger 
---------------------------
Sozialstiftung Bamberg
Buger Stra?e 80, 96049 Bamberg
-----------------------------------------------------------------------------------------------------------------------
Vorsitzender des Stiftungsrates: Oberburgermeister Andreas Starke | Vorstand: Xaver Frauenknecht
-----------------------------------------------------------------------------------------------------------------------