[Samba] Secondary Unix Groups

Rowland penny rpenny at samba.org
Wed Mar 10 16:32:51 UTC 2021

On 10/03/2021 16:24, Samuel Taylor Liston wrote:
> Rowland,
> That’s a good point:  I believe we are using uidNumber and gidNumber 
> from the AD, which may be why samba only knows about the the primary 
> group given it as the gidNumber.
> I think I may have found a workaround and that is to set ‘force group’ 
> on each share.  I’m going to do some testing today.

Please don't do that, if you have uidNumber & gidNumber attributes in 
AD, then remove sssd (which you should do anyway) and set the share 
permissions from Windows.

see here: 


More information about the samba mailing list