did setting the group search base help?
The issue seems to be that without a valid user search base on the autofs domain the search for groups fails as the initial search for users returns no results. It then switches to the auth domain and pulls out the wrong groups.
What we are aiming for is really to only get password information from the auth domain and get everything else from the autofs domain.
It would also be nice if you could reply once again to the original
ServerFault question, since the conversation started there..