samba - Mar 2021 - Secondary Unix Groups

Rowland,
That?s a good point:  I believe we are using uidNumber and gidNumber from the
AD, which may be why samba only knows about the the primary group given it as
the gidNumber.
I think I may have found a workaround and that is to set ?force group? on each
share.  I?m going to do some testing today.

Sam Liston (sam.liston at utah.edu<mailto:sam.liston at utah.edu>)
=========================================Center for High Performance Computing -
Univ. of Utah
155 S. 1452 E. Rm 405
Salt Lake City, Utah 84112 (801)232-6932
=========================================


On Mar 10, 2021, at 2:04 AM, Rowland penny via samba <samba at
lists.samba.org<mailto:samba at lists.samba.org>> wrote:

uidNumber & gidNumber

On 10/03/2021 16:24, Samuel Taylor Liston wrote:
> Rowland,
> That?s a good point: ?I believe we are using?uidNumber and gidNumber 
> from the AD, which may be why samba only knows about the the primary 
> group given it as the gidNumber.
> I think I may have found a workaround and that is to set ?force group? 
> on each share. ?I?m going to do some testing today.

Please don't do that, if you have uidNumber & gidNumber attributes in 
AD, then remove sssd (which you should do anyway) and set the share 
permissions from Windows.

see here: 
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

Rowland