net ads search -U sudlp objectSid=S-1-5-21-1980385058-2169291792-3532307926-30743 returns: ... uidNumber: 1281861756 gidNumber: 100 ... However: wbinfo -S S-1-5-21-1980385058-2169291792-3532307926-30743 1281861756 wbinfo -Y S-1-5-21-1980385058-2169291792-3532307926-30743 Could not convert sid S-1-5-21-1980385058-2169291792-3532307926-30743 to gid If I take a packet trace during wbinfo, I can clearly see the ldap query and the uid and gid values both being returned - so for some reason winbind is just ignoring it.
Winbindd is honoring the AD primary group and not the posix primary group. I have a patch for this that I'm integrating now. So look for this in the SAMBA_3_0 svn tree soon.
I believe this is fixed in 3.0.25pre2