s4:winbind: implement calls for allowing getent groups