[Samba] [Winbind] group membership with unidirectional trust relationship

mathias dufresne infractory at gmail.com
Tue Mar 18 10:53:41 UTC 2025


Hello,

I configured Winbind to access several AD domains on a member server.
For users belonging to an AD domain with a bidirectional trust
relationship, all groups for these users are retrieved.
For users belonging to an AD domain with a unidirectional trust
relationship, these users have only two groups: "Domain User" and the group
built from username.

I'm wondering if I missed something in my configuration or if this is a
normal behavior, a limitation in Winbind while accessing domains with
unidirectional relationships.

Best regards,

Mathias


More information about the samba mailing list