samba-mirror/docs-xml/smbdotconf/winbind/winbindenumgroups.xml

<samba:parameter name="winbind enum groups"
                 context="G"
				 type="boolean"
                 advanced="1" developer="1"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
	<para>On large installations using <citerefentry><refentrytitle>winbindd</refentrytitle>
	<manvolnum>8</manvolnum></citerefentry> it may be necessary to suppress 
	the enumeration of groups through the <command moreinfo="none">setgrent()</command>,
	<command moreinfo="none">getgrent()</command> and
	<command moreinfo="none">endgrent()</command> group of system calls.  If
	the <parameter moreinfo="none">winbind enum groups</parameter> parameter is
	<constant>no</constant>, calls to the <command moreinfo="none">getgrent()</command> system
	call will not return any data. </para>

<warning><para>Turning off group enumeration may cause some programs to behave oddly.  </para></warning>
</description>

<value type="default">no</value>
</samba:parameter>