winbind - adding NT groups to local groups

[craig]

Hi all,

I have samba up and running on a RedHat 8.0 server, using domain
security and running winbind for authentication. Everything is working
OK, but I would like to do something more with this setup.

Is there any way that I can add domain users & groups from my NT4 PDC
to local unix groups on the linux server?

Basically I want to have more granualar access to resources on the
RedHat box by having local groups, which will 'own' various
directories, and giving domain users access to these locations by
adding domain users or groups to the 'owning' local unix
groups.Something like the usual NT local / global group approach.

I tried using ' gpasswd -a Domain+user localgroup ', which 'appeared'
to have worked, but in reality although it lists 'Domain+user' as a
member of localgroup, it doesn't actually seem to work in practice -
i.e. the user is denied access to the resource.

I have searched like crazy but can find only limited info on winbind -
and no answers to this question.

I would be very grateful if anyone has any suggestions.

TIA

Craig Jackson.