Restrict Winbind enumeration to specific OU?

[Justin Maggard]

 From what I've seen, using winbind in a large corporate ADS environment 
tends to lead to a lot of memory and CPU usage, which can be pretty 
hardon an old system or an embedded system running Samba.  In many 
situations, it would be nice to be able to limit winbind to one or more 
specific OUs.  Has any work been done to this end?

- Justin