Forget my previous message - it turned out that the local /etc/group contained a line for the "staff" group which had a different number than the line in the NIS groups map. The files had been created using the local definition, but the entry in passwd was according to the one in NIS. Duh!