You should check whether the relevant group's members can be seen using
command `getent group <group name>`. If not, you probably need to
add/change the "winbind expand groups" option in smb.conf.
Xand
--
Xand Meaden | Senior Research Infrastructure Engineer
e-Research | King's College London