> This attribute is a list of all the SIDs of all groups the user is a > member of, including nested groups, and taking account of disabled groups: Nice. Do you know if this includes the primaryGroup value which is missing from the memberOf attribute?