[Samba] Group membership not resolved on file server (winbind+kerberos+nfs4)

[Rowland penny]

On 20/01/2021 15:59, Andreas Hauffe wrote:
>>
>> Has the user logged in ?
> Yes and no. The user has logged in on the client and tries to access 
> the NFS-share, but he has not logged in on the server.
I take it that you mean the user has logged into a Unix client and is 
trying to access a share on another Samba server, if so, then the user 
is getting authenticated on the other Samba server, or to put it another 
way, the user is logged in on the other server.
>>
>> The group memberships didn't use to expand from trusted domains, but 
>> from my understanding, this was supposed to have been fixed from 
>> 4.9.0, see:
>>
>> https://bugzilla.samba.org/show_bug.cgi?id=13300
> In case of a smb-share accessed from windows everthing works fine.

It is possible the bug wasn't fixed 😕