[Samba] Secondary Unix Groups

[Rowland penny]

On 10/03/2021 16:24, Samuel Taylor Liston wrote:
> Rowland,
> That’s a good point:  I believe we are using uidNumber and gidNumber 
> from the AD, which may be why samba only knows about the the primary 
> group given it as the gidNumber.
> I think I may have found a workaround and that is to set ‘force group’ 
> on each share.  I’m going to do some testing today.


Please don't do that, if you have uidNumber & gidNumber attributes in 
AD, then remove sssd (which you should do anyway) and set the share 
permissions from Windows.

see here: 
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

Rowland