Winbind doesnt enumerate more than one group from an AD domain

[James Braid]

> I had the same problem aswell..
> 
> I found it was due to the fact the groups weren't 'Global' groups only
> 'Local' groups...
> 
> Apparently they need to be Global or Universal to be shown by Winbind.

I have tried using Global and Universal groups on the AD server and
neither type seems to work. Local groups don't show up in wbinfo at all,
and Global/Universal groups don't get enumerated by wbinfo -r $user,
EXCEPT for the Domain Users group.

Any ideas?

Cheers, James