[Samba] Odd behavior on group membership

[Rowland Penny]

On Wed, 28 Nov 2018 10:12:39 -0200
Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote:

> Hi Rowland, thank you for your prompt reply,
> 
> I sent you the testparam output hence lots of defaults (i presumed
> would be better), here is crude smb.conf:
> 
> root at araucaria:~# cat /etc/samba/smb.conf
> [global]
>      netbios name = ARAUCARIA
>      realm = AD.TLD
>      server role = active directory domain controller
>      workgroup = A1
>      server services = -dns
>      ldap server require strong auth = no
>      wins support = yes
>      ntlm auth = yes
>      log file = /var/log/samba/%m.log
>      log level = 1 auth_audit:3 auth_json_audit:3
>      idmap_ldb:use rfc2307 = yes
>      idmap config * : backend = tdb
>      template shell = /bin/bash
>      template homedir = /home/usuarios/%U
> 


OK, You cannot get a correct list of a users supplementary groups
unless the user has logged into the computer, see here (under 'winbind
changes' near the bottom of the page):

https://wiki.samba.org/index.php/Samba_4.6_Features_added/changed

Rowland