[Samba] Samba 4, Winbind & RFC2307

[Thomas Simmons]

Hello,

After provisioning a domain (with rfc2307 attributes), what are the next
steps to enable S4 winbind to use these attributes?

I have one server configured to get user info from AD via LDAP, and with
the proper mappings, getent passwd reports the uid, gid, shell, etc that I
have specified in AD. However, when using winbind for authentication,
getent passwd reports incorrect (generated?) info for these attributes.
I've tried adding:

idmap config DOMAIN:backend = ad
idmap config DOMAIN:schema_mode = rfc2307

and several other 'idmap config DOMAIN' and 'winbind xxx' options to no
avail. Can anyone provide suggestions on how to get this working? Thank you.