It is observed that "getent group <GroupName>" returns only a partial list of Active Directory (AD) users.
For example, there are 1,000 AD users in AD group Testgroup. Running "getent group Testgroup" only returns a partial list of users.
bash-3.00# getent group Testgroup
There is a 1024 char buffer limit on some versions of Solaris. Some versions of Solaris, such as Solaris 10, have increased the buffer size to 8096.
The workaround is to set "nss.split.group.membership: false" in /etc/centrifydc/centrifydc.conf and then run adreload.