[NOTE: organization specific names such as DOMAIN & users replaced with dummy placeholder] Using Samba 3.2.3 when doing something like "id -G DOMAIN+username" on a typical RID idmap winbind setup, where 'username' is a member of groups that are nested within other groups, I get the following error in my log.wb-DOMAIN file: [2008/09/11 16:26:19, 1] libads/ldap_utils.c:ads_ranged_search_internal(323) could not pull first usnChanged! [2008/09/11 16:26:19, 1] winbindd/winbindd_ads.c:lookup_usergroups_memberof(680) lookup_usergroups_memberof ads_search member=CN=Some User,OU=Users,OU=OU,OU=REGION,OU=Org,DC=foo,DC=org: Out of memory The command only lists a minority of groups that he is a member of before the error message in the log file is printed. Our smb.conf contains : winbind nested groups = yes winbind expand groups = 10 This setup works more or less reliably on 3.0.27a (I can see all or most of his groups including those that are nested). Thanks.
Michael, is that related to bug #5945?
(In reply to comment #1) > Michael, is that related to bug #5945? > Unfortunatly, I posted this bug almost 9 months ago and the test setup no longer exists and I am no longer responsible for maintaining Samba installations at my workplace.That being said, I'll check to see if I have the old configs in SVN and I'll try to reproduce on our network with the most recent Samba version.