did setting the group search base help?
The issue seems to be that without a valid user search base on the
autofs domain the search for groups fails as the initial search for
users returns no results. It then switches to the auth domain and pulls
out the wrong groups.
What we are aiming for is really to only get password information from
the auth domain and get everything else from the autofs domain.
It would also be nice if you could reply once again to the original
ServerFault question, since the conversation started there..