I fully share. I'm discovering Nethserver I can't yet figure out why such constraint, design choice or whatever reason behind this.
However I'm very far from having read lot of documentation or forum yet.
Nevertheless, it looks very strange too me
I even don't understand what could be the added value Well, I do understand that POSIX ACL won't work. OK, fine, what does it really mean? I mean in real deployment scenario?
It doesn't mean DC as a container but means two Samba deployments, one acting as DC and the other as files sharing server, joining domain exposed by DC. Is it what NS provides? (I didn't work back, hands on, on my broken NS server yet, trying for the time being to understand the logic behind its general design)
Comment from Samba team on this specific topic: