> If I'm not completely wrong, winbind does all this. See > "idmap backend = ad" and "winbind nss info = rfc2307". > > Well it does - but only for "passwd" and "group" NSS databases. It can not handle other databases like services, protocols, networks..... :-( Ondrej