Running 4.24.3 on Tumbleweed, users don't show their groups except "domain users"

So, this is a long running openSUSE Tumbleweed host and it used to be that when 
a person did "id" (for example) it would show all the AD groups they were a 
member of.  Now it just shows "domain users".

This is just a domain member host.  Our AD is Windows 2022.

Enumeration of users and groups works.  That is, wbinfo -u, wbinfo -g... all 
work normally.  I can getent group my-ad-group-name, and that works just fine.

What is not longer working is anything (like ssh and id as mentioned) where we 
want to see the AD groups a user belongs to.  This used to work.

My sshd_config, for example used to have:

Match group "server support"
        AllowUsers *

But that no longer works and I had to change it to "domain users" (which means 
everyone, which I don't want).

Checking id for a user I get:

$ id
uid=16880387(cjcox) gid=16877729(domain users) groups=16877729(domain users)

If I look at a domain joined host running a vastly older version of winbind, I get:

$ id
uid=16880387(cjcox) gid=16877729(domain users) groups=16877729(domain 
users),16777217(BUILTIN\users),16878461(staff),16880387(cjcox),16880506(server 
support)

I know the "winbind expand groups" option default changed, but I've tried 
changing that to "1" and rebooting and everything, but that didn't fix it.

Not sure if it's winbind issue or something messed up strictly with Tumbleweed. 
Anyone have any ideas?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba