MS-RAA seems like it provides a way to dynamically get the group SIDs ...
realrichardsharpe at gmail.com
Tue May 13 06:08:08 MDT 2014
MS-RAA 220.127.116.11 AuthzGetInformationFromContext (Opnum 4) seems to be it.
More information about the samba-technical