[Samba] New group membership not taken into account on member servers

[steve]

On 04/10/14 22:52, Sébastien Le Ray wrote:
> Yes, and it is correctly returned by getent group/wbinfo --group-info

Is wbinfo and getent returning the new membership on _all_ the DCs? Does 
the user dn contain the correct memberOf and the group dn the member on 
_all_ DCs?

Could we take winbind out of the mix for a while and try sssd. It would 
narrow it down for us a bit more.

> Le 04/10/2014 21:44, Min Wai Chan a écrit :
>> ah...
>>
>> Did you new group have gid???
>>
>> On Sun, Oct 5, 2014 at 3:03 AM, Sébastien Le Ray
>> <sebastien-samba at orniz.org <mailto:sebastien-samba at orniz.org>> wrote:
>>
>>     No more success (btw winbind cache time default to 300 & idmap
>>     negative to 120).
>>
>>     Regards
>>     Le 04/10/2014 19:12, Min Wai Chan a écrit :
>>
>>         Try these?
>>
>>         This should short the cache time to 5 mins
>>         Cut it lower if you need a shorter time...
>>
>>                  winbind cache time = 300
>>                  idmap cache time = 300
>>                  idmap negative cache time = 300
>>
>>
>>
>