Group information lost when security = server

[Steve Francis]

Hi.

I have a samba install, samba-1.9.18p4, with security=server.  Users are
validated against the NT domain controller correctly, and user accounts
do exist on the unix box (AIX 4.2.1)

Problem is that while the uid of the files that users create is correct,
the group id is always sys, even though the users have as primary gid
STAFF.

The definition of the share I am trying to create is:
[cslan]
        comment = cslan data.  Current Managers stuff only
        path = /csfiles
        writable = yes
        public = no
        valid users = corr vsefcik bmiller rallard
        create mask = 0760
        force user = %U
        force group = %G

I tried adding the force user/group lines to try to resolve this, but
with no luck.

Anyone have ideas? Should the gid be preserved?

TIA

--
Steve Francis
Network Analyst,
UCSB Communications Services
805 893 7775
fax 805 893 7272