I have a samba server running as a NT domain controller, and a linux client computer that is joined to that domain controller. I login to the linux computer as a domain user, is it possible to assign local groups (e.g. games, floppy, video, etc) to the domain user other than modifying the /etc/group upon successful authentication? Can pam_group do what I need?