libnss-ldap vs winbind?

[Andreas Schuldei]

I set up winbind on one box successfully. Now a friend told me
that it might be better to use ActiveDirectoriy (the PDC and all
other servers are win2000). What is the difference in both
approaches? which is 'better'?

I feel that ldap is the more general and cleaner solution. Is
that true? My windows-admins will get rid of wins soon. does
winbind rely on wins? can libnss-ldap also create pseudo UIDs and
GIDs?