I’m having a lot of AD/OD problems and I’m not sure if they are related. I’ll separate them into different threads here. (BTW, afp548 is a great resource.)
My file server is bound to AD and is an OD Master. I want to grant permissions to my file shares via AD groups that the university manages. There are many, many levels of group nests and a typical student might be in 40-50 groups.
Everything appears to work fine when an AD user is added to the ACL list for a share. When an AD group is added instead, members of that group won’t have access to the share as if they are not in group. Some high level groups work OK but most groups do not.
When I run an “id user” command, I only see the user’s UID and GID unless they are also an AD admin in which case I see all the groups they are a member of. Yet AD admins and normal users both have the same problems when it comes to AD Groups, ACLs, and fileshares.
Any suggestions? I’m running 10.5.4 Server. Thanks.