CUPS ldap group authentication not working

[John A. Sullivan III]

>
> --Apple-Mail-5-24893626
> Content-Transfer-Encoding: quoted-printable
> Content-Type: text/plain;
> 	charset=us-ascii
>
> On Feb 13, 2010, at 11:15 AM, John A. Sullivan III wrote:
> > ...
> > If I leave SystemGroup at lpadmin and add john to lpadmin, it works as =
> expected.  The problem seems to be the LDAP groups.  I do notice that =
> getent group <groupname> on an LDAP group always returns an empty group =
> whereas it returns populated local groups - John
>
>
> Well, that's the reason it isn't working.  Either the nss_ldap plugin is =
> buggy or there is a problem with the LDAP data keeping it from =
> populating the group data.
>
> <snip>
OK - at least I'm on the right track.  Unfortunately, I've been beating my head against the wall (or google more accurately) trying to learn what makes getent and LDAP groups get along and I've not yet solved it.  Would this be NSS mapping? Any pointers? Documents? Howtos? Thanks for the help - John