Cause: 'wbinfo -g' & 'gentent groups' only return partial result compare to 'net ads group'. But able to get missing group info. Problem: Unable to authenticate group. # wbinfo -g | wc -l 4998 # net ads group | wc -l 9114 # getent group | wc -l 5047 [+ local groups] Take a group dl.samplegroup, which is in the DC, but missing from wbinfo # net ads group | grep dl.samplegroup dl.samplegroup [found] # wbinfo -g | grep dl.samplegroup [not found] # getent group | grep dl.samplegroup [not found] BUT, these works # getent group dl.samplegroup dl.samplegroup:*:15053: user1,user2,.... # wbinfo -n dl.samplegroup S-1-5-21-839012768-2468886555-2058922813-7287 Domain Group (2) # wbinfo -Y S-1-5-21-839012768-2468886555-2058922813-7287 15053 From the PDC, it turns out that the groups does not appear in wbinfo are of Group Type: 'Distribution' in Win2k AD? The other is of 'Security'. My system: CentOS 5 2.6.18-8.el5 Samba: samba-common-3.0.23c-2.el5.2.0.2 samba-3.0.23c-2.el5.2.0.2
Created attachment 2779 [details] DC screenshot of 'Group Type'
(In reply to comment #1) > Created an attachment (id=2779) [edit] > DC screenshot of 'Group Type' > I have the same problem of you, my system is: Ubuntu Server Feisty Samba 3.0.24 Winbind 3.0.24 libpam-smbpass 3.0.24