Samba account Synchronization

Samba account synchronization-Linux Enterprise Application-Linux server application information. For more information, see. Hello everyone! The following prompt is displayed when samba3.6.10 is compiled and installed on centos5.5 and added to the win2008 domain by using net ads join-U administrator:
Using short domain name -- TEST
Joined 'centos 5' to dns domain 'test. cn'
No DNS domain configured for centos5. Unable to perform DNS Update.
DNS update failed!
Use net rpc join-U administrator
Enter administrator's password:
Joined domain TEST. If there are no errors, add them to the domain.
Net ads info-U administrator
Enter administrator's password:
Domain Name: TEST
Domain SID: S-1-5-21-3395026221-1639031799
Sequence number: 1
Num users: 184
Num domain groups: 0
Num local groups: 39

/Usr/local/samba/bin/net rpc join-U administrator
Enter administrator's password:
Joined domain TEST.

/Usr/local/samba/bin/net rpc testjoin-U administrator
Join to 'test' is OK
/Usr/local/samba/bin/net ads testjoin-U administrator
Join is OK

/Usr/local/samba/bin/net ads info-U administrator
Enter administrator's password:
LDAP server: 192.168.100.2
LDAP server name: AD1.TESTcn
Realm: TEST. CN
Bind Path: dc = TEST, dc = CN
LDAP port: 389
Server time: 5, 28 December 20 11:46:30 CST
KDC server: 192.168.100.2
Server time offset: 8

/Usr/local/samba/bin/wbinfo-t
Checking the trust secret for domain TEST via RPC callsucceeded
/Usr/local/samba/bin/wbinfo-u
CENTOS5/test
Administrator
Guest
Krbtgt
/Usr/local/samba/bin/wbinfo-g
Domain computers
Domain controllers
Schema admins
Enterprise admins
Cert publishers
Domain admins
Domain users
Domain guests


The above check is normal, and I want to give you a directory Change Group
Chgrp-R test File
An invalid group is prompted, so it is difficult to set permissions for shared files.
How can I synchronize domain users to samba and log on to samba.
Getent passwd
Configuration File
[Global]

Workgroup = test

Netbios name = centos5

Server string = Samba Server % v
Security = ads

Realm = test.cn

Password server = *

Encrypt passwords = yes

Winbind separator =/

; Idmap uid = 10000-20000

; Idmap gid = 10000-20000

Idmap config *: range = 10000-20000
Idmap config *: backend = tdb

Template shell =/bin/bash

Winbind use default domain = yes

Winbind enum users = yes

Winbind enum groups = yes
Wins server = 192.168.100.2
Client ntlmv2 auth = yes
Log level = 5
Template homedir =/home/% D/% U
Log file =/usr/local/samba/var/log. % m
Max log size = 500
[Test]
Comment = test File Server
Path =/test
Browseable = yes
Read only = no
Writable = yes