The Samba-Bugzilla – Bug 13136
A Samba KDC doesn't include the RID of the primary group also in the rid array of groups
Last modified: 2017-11-14 15:20:05 UTC
This is done by a Windows KDC. I've seen it in a PAC, but haven't cross checked
a netr_LogonSamLogonEx response.