@AsSASsin,
Thanks for your response.
Is it normal refresh the spawner each time we change the Group of an user?
With your current setup - yes.
But from my point of view, rather than complicating SAS configuration, just configure PAM authentication on the OS and switch to PAM authentication in SAS. In this case, you do not need to create multiple workspace servers and you can manage access to physical data based on your LDAP/AD groups. Please note in order to configure PAM on the OS level, your LDAP schema has to be UNIX enabled. This means that your LDAP schema should contain information about user's UID, GID and so on.
... View more