[Samba] winbind fails "getent passwd eknuds"

[Eric Knudstrup]

Now I'm trying to make it so the Samba accounts can be used for user 
logins as well.  Unfortunately I'm having a bit of trouble with winbind.
Whenever I try to do a "getent passwd eknuds", it find the entry in the 
ldap sam, but the winbind log for my domain comes up with this and the 
getent displays nothing:
[2007/03/07 15:48:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
 init_sam_from_ldap: Entry found for user: eknuds
[2007/03/07 15:48:46, 0] passdb/pdb_get_set.c:pdb_get_group_sid(164)
 pdb_get_group_sid: Failed to find Unix account for eknuds
[2007/03/07 15:48:46, 1] 
nsswitch/winbindd_user.c:winbindd_dual_userinfo(151)
 error getting user info for sid 
S-1-5-21-3868333197-704855571-3977030669-3012

I have my nsswitch.conf set to:
passwd: files winbind
shadow: files winbind
group:  files winbind

#passwd:        compat
#group: compat

hosts:  files wins dns
networks:       files dns

services:       files ldap
protocols:      files
rpc:    files
ethers: files
netmasks:       files
netgroup:       files ldap
publickey:      files

bootparams:     files
automount:      files nis
aliases:        files ldap
passwd_compat:  winbind
group_compat:   winbind

Do I need to bite the bullet and add accounts to the local Unix passwd 
file?

Thanks,

Eric