[Samba] idmap ignores the range set in smb.conf

[steve]

Hi
server: Ubuntu 12.04 samba4 DC running winbindd
client: Ubuntu 12.04 samba 3.6.6

client smb.conf:
realm = polop.site
workgroup = POLOP
security = ADS
wide links = Yes
unix extensions = No
template shell = /bin/bash
winbind enum users = Yes
winbind enum groups = Yes
idmap uid = 300000-400000
idmap gid = 20000-30000

The client is joined to AD and users can login.

But, for example, a user does not correspond to the 300000-40000 range set:

POLOP\joseph-p:*:20003:20000:joseph-p:/home/POLOP/joseph-p:/bin/bash

I've cleared
winbindd_idmap.tdb
from
winbindd_idmap.tdb
on the client and restarted winbind and nscd is stopped.

What am I doing wrong?
Cheers,
Steve