wbinfo -i output domain realm vs. ntdomain before login

[Rowland Penny]

On Wed, 18 Apr 2018 18:31:01 +0200
Heiner Lesaar via samba-technical <samba-technical at lists.samba.org>
wrote:

> Dear all,
> 
> I have posted on samba at lists before and got a hint towards a change of
> winbind behaviour since samba 4.7 from a kind subscriber, 

I am a bit more than a subscriber ;-)
But what I said, as far as group membership is concerned, is correct. 

>but
> unfortunately the hint towards a change in group membership
> calculation does not really (seem to) relate to my question.
> 
> I would like to be able to get a consistent result when running
> wbinfo -i so that it does not differ between user creation and after
> first login.
> 
> For reference, please see my original request below and thanks a lot
> for your help and suggestions!
> 
> Heiner
> 
> 
> On CentOs7 based linux w. different versions of Samba (4.6.x from
> CentOS repos, but also Sernet-Samba-4.7.4 and also compiled from
> source), "wbinfo -i user at domain.tld" returns different results before
> the first successful authentication of the user.
> 
> Server joined as member to Active Directory, idmapping via tdb2 and
> rid or ad - does not seem to make a difference.
> 
> On first attempt, the result returns "DOMAIN-REALM+Username", but
> after 1st login it switches to "NTDOMAIN+Username" 

Now this is the strange part, I never see this, what are you connecting
from and if it is a Unix machine, can we see your smb.conf.

Rowland