Mapped GID is changing while accessing CIFS share

Question

Hi guys
We're seening a strange issue on our AD-bound macs that the mapped GIDs of files on a CIFS share are changing without any change on the filesystem.
First of all let me explain our setup:
1. All macs are joined to our active directory domain. The output of "dsconfigad -show" for the uid/gid mapping looks as follows:
<snip>
Advanced Options - Mappings
  Mapping UID to attribute       = not set
  Mapping user GID to attribute  = not set
  Mapping group GID to attribute = not set
  Generate Kerberos authority    = Enabled
<snap>
2. Macs access a cifs share on a netapp filer.
3. Username and groupnames are mapped correctly. The output of "id rth" for my user looks as follows:
uid=1973125731(rth) gid=2108864217(OSAG\corp) groups=2108864217(OSAG\corp),....
Problem:
When I mount the netapp CIFS share and enter it, everything looks good:
<snip>
rth@mac-rth:~$ ls -l /Volumes/os/it
total 696
drwx------+ 1 rth  OSAG\corp  16384 Nov 29 11:48 admin
drwx------+ 1 rth  OSAG\corp  16384 Mar 29  2004 corphtmlstats
<snap>
However when I execute a second ls a few seconds later, it can't map the group anymore:
<snip>
rth@mac-rth:~$ ls -l /Volumes/os/it
total 696
drwx------+ 1 rth  2181038096  16384 Nov 29 11:48 admin
drwx------+ 1 rth  2181038096  16384 Mar 29  2004 corphtmlstats
<snap>
It seems that the mapping doesn't work anymore even tough nothing has changed in the meantime. The same behaviour can be seen on any folders on this share. With the first ls everything seems to be OK and with the 2nd execution the mapping is not correct anymore.
From time to time it happens, that the mapping is correct again for single files or folders for a short period of time.
Has anyone seen a similar behaviour so far?
Thanks for your help.
Cheers
Raphi

Answer 1

Sounds like an issue that has to do with JavaScript Origin policy. You'll have to use Domain Relaxing for this. Read all about it here:
http://help.sap.com/saphelp_nw04/helpdata/en/59/87b54064c2742ae10000000a155106/frameset.htm
here:
http://help.sap.com/saphelp_nw04/helpdata/en/5e/473d4124b08739e10000000a1550b0/frameset.htm
and here:
http://help.sap.com/saphelp_nw04/helpdata/en/cb/f8751d8c6b254dac189f4029c76112/frameset.htm