>> So, is there a way I can specify that winbind only uses the CSS domain and >> does not try and connect to the other trusted domains? > > allow trusted domains = no Thanks for the suggestion, but this didn't make a difference.
However, I've managed to find the answer / workaround: The following needs to be set in smb.conf: winbind:ignore domains = MAT LPS LAB MMSC GRP IMCR UPGRADE CENTRAL MISE 4THFLOOR AD CSSDEV NAS In case it's not obvious, the list is the names of all the trusted domains I want Winbind to ignore. I did see a patch that performs the inverse of this (so you specify the domains you *want* to search) but as this is not part of the mainline code I decided to avoid it as I don't want to be maintaining different versions. Thanks Julian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba