grp.getgrall will only list groups in the local group database, it won't pull all nss (ldap, nis) groups, not sure how to handle this gracefully without potentially misleading users about what group sources are actually being used.