[Samba] "winbind enum groups = yes" not working

[Adam Tauno Williams]

I have an application (cupsd) which requires group membership
enumeration for its Access Control to work.

I have added 
  winbind enum users = yes
  winbind enum groups = yes
to my config.

Then:
$ smbcontrol all reload-config
$ net cache flush
$ getent group cis
cis:x:230:


My 'old' server shows (samba-3.6.9-167.el6_5.x86_64):

[root at crew pam.d]# getent group cis
cis:*:230:user1,user2,user3,user3, etc....

What simple thing am I possibly missing?

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
OpenGroupware Developer <http://www.opengroupware.us/>