I have winbind working with 2003 AD and it works perfect UNTIL I add new users... they can't login. getent passwd just gives me the old users and not the ones I just added but wbinfo -u will shows the new users. Restarting samba and winbind doesn't seem to help. I have the winbind cache renew set to 1 so I don't think thats an issue. I have also checked NSCD and it is not running.

I set winbindd debug level to 3 and looked at the log. I see this

idmap fatal error: GID range is full!! (max:2000)

I tried setting the max to 50000 and i get the same problem. Has anyone ever encountered this and know how to fix it? I am new to Linux so any help would be great.

Thanks

I think that its winbind is not at fault but Linux. I think Linux is not seeing the new users. Could this be it?

Bump the limit up to 50000000 and see what happens. I had to set mine alot higher in order to accomidate the high guid numbers.