I keep forgetting about that. The AD DC config has this but apparently the user/groups config of the file server is still missing it. Please file an issue on sambacc.
Originally posted by @phlogistonjohn in samba-in-kubernetes/sit-environment#113 (comment)