[Samba] groups command not listing supplementary groups

[Rowland Penny]

On Mon, 12 Jan 2026 14:46:06 +0000
Paul Griffith via samba <samba at lists.samba.org> wrote:

> Hello Samba Team,
> 
> We are experiencing a rather unusual issue with Samba.
> 
> On some of our systems, the 'groups' command is not retrieving the
> correct supplementary group membership and is causing various
> permissions-based issues.
> 
> For example:
> 
> % groups webapp
> webapp : webappg domain users
> 
> Note that it shows webapp is only a part of webappg and "domain
> users".
> 
> What it should be showing (and shows on other machines):
> 
> % groups webapp
> webapp : webappg domain users faculty hc_server submit hc_prism
> hc_public privkey
> 
> Reboot the server, or even restarting winbind will cause the correct
> group membership to come back.
> 

Try adding 'winbind expand groups = 1' to the smb.conf on the client.

Rowland