Samba + ADS + winbind + no group names

[geta]

Hello,

I think I've encountered quite a strange problem.:

- I installed samba (3.0.11) with all the important use flags (pam, winbind, kerberos), changed the important configuration files (/etc/samba/smb.conf, /etc/nsswitch.conf, /etc/pam.d/*).
- I checked the output from wbinfo -u, wbinfo -g, getent passwd, getent group (prints all AD users and groups)

And this is my problem:
Whenever I try "chown userx:DOMAIN+finance" on the samba server, it tells me about the group name being invalid. Mind you, the group does really exist.
Same thing with samba. When I try to access a share on the samba server (say the folder finance with the group permissions for DOMAIN+finance), the window client tells me the group name couldn't be found, and of course the samba log tells me the same thing.

So what is wrong on my system? Did I forget anything important, or is Samba just freaking out?

Cheers,
geta
_________________
geta - pronounced: "djetta"

[tuxmin]

Maybe you have nscd running?
It's recommended to shut it down when using winbind...

Hth, Alex!!!
_________________
ALT-F4

[geta]