On Mon, Apr 26, 2010 at 09:51:47AM +0200, Oliver Weinmann wrote: > > Deleting the tdb files didn't solve the problem. It's really weird. For > example I have a AD user that is member of three groups: > > Domain users (primary) > > And two other project groups. > > I removed him from the two project groups, the change is immediately > effective under SLES9 3.5.2 Winbind but on the SLES11 system, even after > a reboot the change is still not effective. I wonder where the hell this > is beeing cached? Because if the winbind daemon would query active > directory it should no longer list this user as a member of the two > project groups. > > The Behaviour is the same throughout all of our SLES11 machines.
netsamlogon_cache.tdb is probably the culprit. Once you log in using pam or for example wbinfo -a the problem should be gone. Volker
signature.asc
Description: Digital signature
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
