Windows Domain Integration fails

SUSE Linux Enterprise Server SLES Configure-Administer
1

Hi there,

i´m migrating several servers from sles 9.4 to sles 11.2 and i have trouble with my domain membership. From my point of view everything is configured properly and i do get all my domain user via wbinfo -u. My kerberos is working also, because i can get a proper ticket for my user via kinit. Unfortunately getent passwd/group are not working and wbinfo -i gives me the followng error. Seems to be something wrong with id enum.

failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND

any help on this?

Thanks

my smb.con looks like this

[global]
workgroup = XXX
server string = XXX Data Hub 1 on %h
passdb backend = tdbsam
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
#include = /etc/samba/dhcp.conf
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
usershare allow guests = No
#idmap gid = 10000-20000
#idmap uid = 10000-20000
realm = XXX.ORG
security = ADS
template homedir = /home/%D/%U
template shell = /bin/false
winbind refresh tickets = yes
winbind enum groups = Yes
winbind enum users = Yes
winbind nested groups = Yes
winbind separator = #
winbind use default domain = Yes
winbind offline logon = no
log level = 2

2

i have found a workaround for this issue by adding the following to the smb.conf

    idmap config * : range = 10000-20000
    idmap config * : backend = tdb
    idmap config XXX : default = yes
    idmap config XXX : range = 100000-200000
    idmap config XXX : backend = rid

but normally this should work without also. Other people think this must be a bug in Samba version 3.6.3-0.18.3-2749-SUSE-CODE11-x86_64

what do you think?