[Samba] getent doesnt't list group

[Massimo]

Hi to all,
I have installed Samba+winbind+kerberos on a Ubuntu OS, configured authentication to our ads domain as member
I can list user and group using wbinfo, if I use getent I have the ADS user but not the ads group (only local group).
The problem is that samba does not recognize group in the filesystem and assign a wrong gid to the objects.
I tried to change winbind separator to \ or / but with no success
My samba and winbind version is 3.028a.
my smb.conf:
[global]
        workgroup = domain
        netbios name = Manufac
        server string = Server 
        include = /etc/samba/dhcp.conf
        encrypt passwords = true
  &nbs p;     realm = DOMAIN.LOCAL
        password server = pdc.domain.local
        security = ADS
        winbind enum users = yes
        winbind enum groups = yes 
        winbind separator= +
        idmap uid = 500-100000000
        idmap gid = 500-100000000
        template homedir = /dev/null
        template shell = /bin/true
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
&n bsp;       ldap ssl = no
        panic action = /usr/share/samba/panic-action %d
        invalid users = root

[homes]
        comment = Cartella Personale
        valid users = %S
        read only = No
        inherit acls = Yes
        hide unreadable = Yes
        browseable = No

[divisioni]
        comment = Divisioni
        path = /condivisioni/divisioni/
        read only = No
        create mask = 0777
      &n bsp; directory mask = 0777
        inherit acls = Yes
        map acl inherit = Yes
        store dos attributes = Yes
        hide unreadable = Yes
my nssswitch.conf
passwd:         compat winbind
group:          compat windind
shadow:         files


hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:          &n bsp; db files

netgroup:       nis
 
Thank you in advance.
Bye