Samba Question

[sharif islam]

Did anyone successfully used large AD groups for samba authentication
in Fedora? I was able to join the AD domain and go to the share when I
allow only the users instead of group(s).

And groups 'usernname' command takes around 40 seconds or more to
return the group list. Most users are in more than three groups. I
also noticed the winbind_cache.tdb file gets very large  -- around
4MB.

Any hints? Thanks. 

# rpm -qa|grep samba
system-config-samba-1.2.9-2
samba-3.0.3-5
samba-client-3.0.3-5
samba-common-3.0.3-5
# rpm -qa|grep krb
krb5-devel-1.3.3-7
krb5-libs-1.3.3-7
pam_krb5-2.0.10-1
krbafs-devel-1.2.2-2.1
krb5-workstation-1.3.3-7
krbafs-1.2.2-2.1