Hey,
a while back (or actually, more than a year back...) there was some discussion
in this thread about implementing getgroupmembership support in FreeBSD NSS.
FYI, Michael Bushkov has commited support for this a few weeks back based on
work by me and largely by Michael Hanselmann. For now, there is no support yet
in the nss_ldap and nss_winbind modules, but patches are already available.
Support wil not be merged to 7.0, but hopefully it will be in 7.1.
See pr 115196 [1] for more details about it, and links to the winbind/ldap patches.
Gr.
Matthijs
[1]: http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/115196