[Samba] samba 3.4.8 / solaris / unix secondary groups

[Joe Cammisa]

samba-3.4.8 built under solaris_10 (--with-krb5=/usr/local/lib --with-ads
--with-ldap); on my test server it runs flawlessly; however on the
production server, there is a big exception:  users' secondary group
memberships are not honored.

relevant portions of smb.conf (the same on both servers, save for the ip
addys) are as follows:

[global]
workgroup = WORKGROUP
netbios name = BLABLA
server string = SAMBA
bind interfaces only = True
interfaces = bge0 199.99.99.99
deadtime = 20
debug level = 2
security = user
password level = 8
encrypt passwords = yes
socket options = TCP_NODELAY
follow symlinks = yes
wide links = yes
unix extensions = no
[stuff]
comment = stuff...
path = /vol1/stuff
read only = No
create mask = 0777
directory mask = 0777
inherit permissions = Yes
inherit acls = Yes
map acl inherit = Yes
map archive = No
map readonly = permissions

again, same samba version, built against the same libraries in the same
way with the same config file in both cases.  any one with an idea how i
might make this work?  many thanks in advance!!

-joe