[Samba] Winbind 3.5.2 caching issues under SLES11???

[Volker Lendecke]

On Tue, Apr 27, 2010 at 10:10:29AM -0400, Chris Smith wrote:
> > netsamlogon_cache.tdb is probably the culprit. Once you log
> > in using pam or for example wbinfo -a the problem should be
> > gone.
> 
> I deleted netsamlogon_cache.tdb as well.
> Didn't do a wbinfo -a, but did a wbinfo -u and wbinfo -g.
> The idmapping did not change even after restarting samba until I
> manually deleted those tdb's.

wbinfo -a or an equivalent is the authoritative source.

Quote from http://msdn.microsoft.com/en-us/magazine/cc188757.aspx:

> The authorization framework in Windows has become so
> complicated that it's virtually impossible for a server
> developer to manually discover the groups for a user.

That's the reason why we rely on the DC with wbinfo -a and
can just do flawed attempts to get it right without -a.

Volker