If the secondary group is in LDAP, you should use libuser utilities.
# usermod -a -G utentilocali apache
usermod changes /etc/groups, which is not LDAP. Please, try with lgroupmod.
Edit: the group member list is overwritten by server manager, during group-modify event