Group enumeration either with "net rpc group list", with "net group /domain", in the NT4 user manager for domains and the ACL windows doesn't return any values. net groupmap list however works. If I'm searching for a specified group, it gives the correct result, e.g "net group /domain internet" on a domain member returns the members of the "internet" group correctly. I'm using only the ldapsam backend, doesn't use winbind, using nss_ldap, getent group works.
Did you install the new schema and configure the new index
documented in the release notes?
Stupid me ...
Installed the new schema, added the new index parameter, but didn't run slapindex...Now it works, thanks and sorry for the bad report.