s4:winbind Implement logic for getgroups to work