Log Message:
use the "dynamic" version of nss_ldap_initgroups(), to get the
total number of groups
doesn't make much of a difference for standard systems with
NGROUPS==_SC_NGROUPS_MAX, but someone might change this