This is minor nit, but if I do a waf configure on AIX with the --without-winbind, I still get a reference to winbind_xid_to_sid from libsamba-passdb.so. I haven't crawled through the waf code to figure out why, and it's not a big deal to just compile with winbind, but it should probably be fixed.