vfs_acl_xattr doesn't use the user's Unix primary group if 'idmap config DOMAIN : unix primary group = yes' is set. Discussion: https://lists.samba.org/archive/samba/2022-August/241568.html