[Samba] User not really in group

[Ryan Bair]

I have a Debian Etch AMD64 server running Samba 3.0.24. It is joined
to an active directory domain. Most everything works quite well.

I had set up a user for a scanner but forgot to add it to a group so
that it could access the target folder, so the scans failed. I then
added the account to the group, but for some reason it is still denied
access to the directory.

I su'ed to the user, and they are unable to enter the directory. Every
other member of the group is able to enter the directory without an
issue, even members that were added afterwords.

If I do a "getent group scanned docs", I can see all the users in the
group including the scanner account. However if I issue the groups
command as the copier user, the scanned docs group does not show up in
the listing. The groups command returns the expected list with every
other user.

Any ideas?