When using wbinfo -r to resolve the groups a user is member of is only displays the primary group.
When i clear all files of samba in /var/run/samba /var/lib/samba /var/cache/samba, rejoin the domain
and restart winbind is suddenly does resolve the nested groups.

After a while of running (probably after 30 minutes) running wbinfo -r again only display the primary group..

FYI,

 
This is winbind joined to a 2008 R2 DC. This also didnt happen with 3.5.6

Control: severity -1 normal

Hello,

This bug was somewhat forgotten.

Can you try again from stretch, and also if possible from testing
(future buster)?

Can you provide your smb.conf?

Also note that wbinfo -r is not reliable, per manpage:

       -r|--user-groups username
           Try to obtain the list of UNIX group ids to which the user
belongs. This only works for users defined on a Domain Controller.

           There are two scenaries:

                   1. User authenticated: When the user has been
authenticated, the access token for the user is cached. The correct
group
                      memberships are then returned from the cached
user token (which can be outdated).

                   2. User *NOT* authenticated: The information is
queries from the domain controller using the machine account
credentials which
                      have limited permissions. The result is normally
incomplete and can be also incorrect.


Regards

Version: 4.0.0+dfsg-1

This is a very old bugreport, quite a lot of changes has been made to samba
since that time. The requested additional information hasn't been provided
either.

I'm closing it now with version 4.0, hopefully it has been fixed for good.
Please feel free to reopen it if you think it is incorrect and the issue
is still relevant for current version. For me, wbinfo -r works as expected.

Thanks,

/mjt