Sounds crazy but here it is. I am trying to allow AD users to login to freebsd machine. freebsd machine is named 'ramsgate', AD servers are 'good' and 'bad'. Domain is ld.yandex.ru. Here is smb.conf: ================= [global] client use spnego = yes workgroup = LD password server = good.ld.yandex.ru bad.ld.yandex.ru netbios name = RAMSGATE security = domain realm = LD.YANDEX.RU disable spoolss = Yes show add printer wizard = No idmap uid = 15000-20000 idmap gid = 15000-20000 ;winbind domain name = LD winbind use default domain = Yes winbind separator = \ winbind enum users = no winbind enum groups = no template homedir = /home/wbusers/%D/%U template shell = /usr/local/bin/qshell wins server = good.ld.yandex.ru ====================== for most users everything works perfectly but some of them cannot login. wbinfo -u lists them nice, but wbinfo -r for those users fails: [root@ramsgate /usr/local/src/samba-3.0.23a/docs]# /usr/local/samba/bin/wbinfo -r wawa Could not get groups for user wawa [root@ramsgate /usr/local/src/samba-3.0.23a/docs]# /usr/local/samba/bin/wbinfo -r avk 15000 15001 ... wbinfo (and login as well) fails for all users who have 'w' in their account names. And ONLY for those users. FreeBSD ramsgate.yandex.net 5.5-RELEASE FreeBSD 5.5-RELEASE #0: Tue May 23 14:58:27 UTC 2006 root@perseus.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 [root@ramsgate /usr/ports/net/samba3]# locale LANG= LC_CTYPE="C" LC_COLLATE="C" LC_TIME="C" LC_NUMERIC="C" LC_MONETARY="C" LC_MESSAGES="C" LC_ALL= got this problem with samba-3.0.21b in freebsd ports and compiled by me samba 3.0.23a. I get no idea what happens.
Please retest against 3.0.25a and reopen if still reproducible. If you do reopen, please attach a gzipped set of level 10 debug logs from winbindd.