[Samba] Samba with Winbind and PAM

[samba.20.alclonky at 0sg.net]

I wanna use Samba with Winbind and PAM to log into an Debian over Windows 2003 Server AD

wbinfo -u works perfektly 
but getent passwd only lists the local passwd 


my samba.conf

realm = **.***.COM
workgroup = **
security = ADS
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind use default domain = yes
client use spnego = yes
winbind separator = \\
encrypt passwords = yes
winbind enum users = no
preferred master = no

my nsswitch.conf

passwd:         files winbind
group:          files winbind
shadow:         files winbind

hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4 wins
networks:       files dns

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis


plz help me