[Samba] idmap ad and sfu anyone?

[Doug VanLeuven]

samba SVN 17972, Linux 2.6.16-1.2096
That should be about the same as 2.0.23c

getent passwd works to list domain accounts
getent group works to list domain groups
kinit works for domain accounts
wbinfo -u lists domain user accounts
wbinfo -g lists domain group accounts

In order to access roaming profiles and any shares from 2000 & XP 
clients, I have to map DOMAIN\username to username in username map.
Anyone else running idmap backend=ad and winbind nss info=sfu want to 
give me a tip?

winbind trusted domains and winbind use default domain have no impact on 
this

All the unix attributes are configured in AD, sfu group membership 
matches unix matches windows membership.

Regards, Doug