[Samba] winbind working TOO well! (entire ADS tree returned just local domain)

[Barry Hunter Priest]

version: samba 2.2.8a linux and solaris 8

I am but a leaf administrator in a huge AD tree.  we are using a win2k 
ADS for authentication in my local domain.  I JUST noticed that when 
running wbinfo -u and -g I am getting back the list for the ENTIRE ADS 
tree not just my domain.  I could have sworn that before (pre 2.2.7a) it 
was just the local domain.  I am aware of the 'winbind enum' but the man 
pages say some unix programs might start acting flaky if used.

Is there some way to limit winbind to just my local domain and not the 
entire ADS tree??  or is the 'winbind enum users/groups'=no my only way 
to go to speed things up?

Thanks
Barry