Currently winbindd doesn't return user group list as the result of user authentication. So, to get the user group list, you need to make another call to winbindd. It will be nice to return user groups along with the username as the authentication result. I think that the way to store INFO3 (including the group list) in the cache and then get it later is kind of hack.
later.