title: Linux AD user can use only it's Primary group?
body: <p>Recently we have bounded our Linux server to an AD domain. 
  We are now able to do simple operations, as follows:</p>
  
  <ol>
  <li>Login to our Linux server with AD accounts (also via SSH)</li>
  <li>List and recognize our AD groups with the id command</li>
  <li>Create files, taking ownership on those files and another simple operations</li>
  <li>Create ACL's on the Linux server involving our AD users and groups</li>
  </ol>
  
  <p>However, It seems that our users can not get access with groups other than their primary group.</p>
  
  <h3>Steps we have tried</h3>
  
  <p>Let's say that an AD user named foo is member of "group_A@domain.dom", "group_B@domain.dom" AD groups, and group_A defined as <strong>primary</strong> group.
  We expected that user foo will be able to access files that are own by group_A or group_B, but we have found that the user foo can not get access to files owned (or have permissions) assigned to group_B.</p>
  
  <p>Therefore, our user is member of a lot of ad groups, but only the primary group is effective and can give our user an access on files in the Linux server. This phenomenon seems to occur across all our environment</p>
  
  <h3>What can we do to allow our AD users get access via all the groups they're member of and not only their primary group?</h3>
  
  <p><em>Technical Info</em> </p>
  
  <p>We are using Rhel7 Linux server, and we joined it to the windows domain with <em>realm</em> tool. We did not gave our users a POSIX attributes, and there is an auto ID mapping</p>