The groupentry class allows you to look up entries from /etc/group or from elsewhere if you're using the Name Service Switch.