I applied the patch from upstream to the 4.1.6+dfsg-1ubuntu2.14.04.12 source and recompiled. The patch does indeed fix this issue.
** Patch added: "Patch for samba bug 10824" https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1315565/+attachment/4552663/+files/bug-10824-nsswitch-Skip-groups-we-were-not-able-to-map.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/1315565 Title: nss-winbind is returing -1 for supplemental groups To manage notifications about this bug go to: https://bugs.launchpad.net/samba/+bug/1315565/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs