Samba4 winbind: use rfc2307 not working with winbind

[steve]

Hi
Here is my smb.conf:
[global]
         workgroup = ALTEA
         realm = hh3.site
         netbios name = HH30
         server role = active directory domain controller
         passdb backend = samba4
         idmap_ldb : use rfc2307 = Yes

and /etc/nsswitch.conf
passwd: files winbind
group: files winbind

In the directory, I have:
Users
  posixAccoint, uidNumber and gidNumber
Groups
  posixGroup, gidNumber

I run winbindd then samba.

testparm adds
     idmap     idmap config * : backend = tdb
to smb.conf

I tried overwruling this with:
   idmap     idmap config * : backend = ad
and specifying a range
and
   idmap     idmap config * : backend =

All uid:gid values come from idmap. If I delete an entry from idmap, it 
is recreated when I run getent with a different gid/uid. Nothing is 
brought from the directory.

This works with nss-ldapd with ldap replacing winbind in nsswitch.conf). 
Maybe I should not be running winbind with this setup?

Does   idmap_ldb : use rfc2307 = Yes work with (or without) winbindd 
running on the DC

Thanks,
Steve