Does your nsswitch.conf specify multiple group file sources? If so, getgrnam(3) (which sudo uses to get the members of a group) may be returning info only for the first one listed... - todd