[Samba] winbind initgroups problem with 2.2.5 on RH 7.2

[Sam & Lisa Snow]

Hello,

I am trying to get winbind up and working for logins. Here is my error
message from /var/messages:
Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow' granted acces
Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow' granted acces
Aug 20 20:59:51 aslan login[32713]: initgroups: Operation not permitted


Here is my pam.d/login file:

#%PAM-1.0

# orginal before winbind
# auth       required   /lib/security/pam_securetty.so
# auth       required   /lib/security/pam_stack.so service=system-auth
# auth       required   /lib/security/pam_nologin.so

# added for winbind
auth       required     /lib/security/pam_securetty.so
auth       required     /lib/security/pam_nologin.so
auth       sufficient   /lib/security/pam_winbind.so
auth       required     /lib/security/pam_pwdb.so use_first_pass shadow
nullok
account    sufficient   /lib/security/pam_winbind.so

# original
account    required     /lib/security/pam_stack.so service=system-auth
password   required     /lib/security/pam_stack.so service=system-auth
session    required     /lib/security/pam_stack.so service=system-auth
session    optional     /lib/security/pam_console.so
session    required     /lib/security/pam_mkhomedir.so skel=/etc/skel/

Any other information I should be providing? Winbind is checking the
password correctly, so at least I am half way there! Looking through the
archives I see several recent references to people having the same error
message, but no solutions posted yet ;-).

Thanks,
Sam