[Samba] winbind group membership
Eugene M. Zheganin
emz at norma.perm.ru
Fri Jan 27 09:23:14 MST 2012
On 27.01.2012 14:48, Eugene M. Zheganin wrote:
> FreeBSD 8.2
> Samba 3.5.11 from ports
> I have an issue with group membership. id shows only small part of the
> groups a user is member of. I'm aware about UNIX max group issue, but
> this isn't related to it - for example for a user which is member of
> the 6 griups id shows only 3. Although wbinfo -r shows correct number
> of groups and wbinfo -G is able to successfully translate UNIX group
> to a domain SID.
I was able to localize the problem a bit more.
First of all, winbind doesn't recognize at all the Universal domain
groups. Since I have only one domain, I simply changed all the universal
group I'm interested in to global ones (still wonder who and why created
all these groups as universal).
But this solved only a part of the problem. I sill don't see all of the
domain groups in 'id' output for the user.
I compared the 'wbinfo -g' output and the 'getent group' output. In the
'getent group' some groups are missing !
These are the same groups that are missing from 'id user'.
So.... any ideas ?
More information about the samba