On Mon, 2014-08-11 at 19:04 +0200, Bruno MACADRÉ wrote: > a bug between getent, nss and winbind.... The correct term is, 'features'. getent group only works if all your domain groups have gidNumber. If you need it t work, you can use sssd or nss-ldapd. HTH,