[Samba] getent group does not list domain groups - question regarding default gidNumbers on PDC

[Łukasz Michalski]

>>
>> Dunno, I just run:
>>
>> samba-tool domain provision --use-rfc2307 --interactive
>>
>> I did not touch ldap databases by hand afterwards.
>>
>> Regards,
>> Łukasz
>>
>>
>>
> Someone did, because the xidNumber for Domain Users is set to '100' by default.
> 
> If you didn't change it, then change the root and Administrator passwords now, someone has access.
> 

I am sure that nobody did this - this is brand new setup, no one has access to it yet besides me.
985 is 'users' gid on samba AD host:

[root at site-ad ~]# cat /etc/group |grep users
users:x:985:

Regards,
Łukasz