[NOTE: organization specific names such as DOMAIN & users replaced with dummy placeholder]
Using Samba 3.2.3 when doing something like "id -G DOMAIN+username" on a typical RID idmap winbind setup, where 'username' is a member of groups that are nested within other groups, I get the following error in my log.wb-DOMAIN file:
[2008/09/11 16:26:19, 1] libads/ldap_utils.c:ads_ranged_search_internal(323)
could not pull first usnChanged!
[2008/09/11 16:26:19, 1] winbindd/winbindd_ads.c:lookup_usergroups_memberof(680)
lookup_usergroups_memberof ads_search member=CN=Some User,OU=Users,OU=OU,OU=REGION,OU=Org,DC=foo,DC=org: Out of memory
The command only lists a minority of groups that he is a member of before the error message in the log file is printed.
Our smb.conf contains :
winbind nested groups = yes
winbind expand groups = 10
This setup works more or less reliably on 3.0.27a (I can see all or most of his groups including those that are nested).
Michael, is that related to bug #5945?
(In reply to comment #1)
> Michael, is that related to bug #5945?
Unfortunatly, I posted this bug almost 9 months ago and the test setup no longer exists and I am no longer responsible for maintaining Samba installations at my workplace.That being said, I'll check to see if I have the old configs in SVN and I'll try to reproduce on our network with the most recent Samba version.