Solaris secondary group limitations (16 groups) .....

Hi,

Can someone help me understand secondary-group limitations and using VAS/Samba on a Solaris host.

UNIX:
VAS with RC Samba
No kernel tweaks (so group limit set to 16 for NFS compat)

AD:
User with 64+ "member-of" group membership.

Would such a user be allowed to access to SMB-shared filesystems on the Solaris/Samba host if group access-control was in place? How does Samba do access-control? Does it look locally? Is winbind still used? Would it make a difference if the user is UNIX-enabled (so they had an NSS-resolvable UID/GID)?

Many thanks,
Alex.