samba - Aug 2018 - "winbind enum groups = yes" not working

I have an application (cupsd) which requires group membership
enumeration for its Access Control to work.

I have added 
  winbind enum users = yes
  winbind enum groups = yes
to my config.

Then:
$ smbcontrol all reload-config
$ net cache flush
$ getent group cis
cis:x:230:


My 'old' server shows (samba-3.6.9-167.el6_5.x86_64):

[root at crew pam.d]# getent group cis
cis:*:230:user1,user2,user3,user3, etc....

What simple thing am I possibly missing?

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
OpenGroupware Developer <http://www.opengroupware.us/>

On Mon, 2018-08-27 at 16:11 -0400, Adam Tauno Williams via samba
wrote:
> I have an application (cupsd) which requires group membership
> enumeration for its Access Control to work.
Ah, change in default value.

  winbind expand groups = 1

Working now.