On Tue, 14 Jul 2015, Rowland Penny wrote:
Failing the inept windows admins changing AD, I would suggest that
you set up
your own Samba4 AD DC.
If I was working around an AD I had no control of that was setup like this:
In sssd.conf:
# Typically this is set to 513 (Domain Users)
ldap_user_gid_number = primaryGroupID
Or:
override_gid = 513
Add Domain Users to /etc/group:
Domain Users:x:513:
jh