wbinfo -r ad-user ==> group missing

I installed samba and winbind on ubuntu 18 and the os is joined to the domain.
when I do a wbinfo -r ad-user I see there is a group missing. Very persistently.

I tried:
net flush
deleted the tdb files
restarted winbind & smb
rebooted

with a centos 7 machine I see the group.

when I do a "wbinfo -r ad-user |wc -l" I get 70 lines on both OS!

only the two last group is's differ:
Ubuntu (wrong):
121361
232554
232494
3004
3001

centos (correct):
121361
232554
232494
236337
16777217

[global]
ldap suffix = dc=saszl,dc=local
load printers = No
log file = /var/log/samba/log.%m
max log size = 50
password server = SR32232.saszl.local
realm = saszl.LOCAL
security = ADS
server string = Samba Server Version %v
template homedir = /net/lfs.saszl.local/home/%U
template shell = /bin/bash
winbind enum groups = Yes
winbind enum users = Yes
winbind offline logon = Yes
winbind refresh tickets = Yes
winbind separator = +
winbind use default domain = Yes
workgroup = saszl
idmap config saszl:base_rid = 0
idmap config saszl: range = 100000-89999999
idmap config saszl: backend = rid
idmap config * : range = 3000-9999
idmap config * : backend = tdb
winbind cache time = 100