[Samba] Winbind only enumerating 9% of domain groups

[ww m-pubsyssamba]

Hi All,

	I'm having a strange pronlem with winbind. For users it seems to be working fine but for groups its not enumerating most of the groups!
A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 2839 lines of groups. I'm not seeing any errors logged and all commands are exiting with status 0. Winbind related sections of smb.conf are shown below,

   security = ads
   encrypt passwords = yes
             winbind separator = +
             winbind cache time = 300
             winbind use default domain = Yes
             template shell = /bin/sh
             template homedir = /tmp
             idmap uid = 10000-60000
             idmap gid = 10000-600000
        winbind enum groups = yes
        winbind enum users = yes
        allow trusted domains = no

Any help much appreciated,

		thanks Andy Smith.