[Samba] Samba 4.1.4 nsswitch/winbind issues

[Doug Meredith]

The two domain controllers (Debian) and the member server (CentOS) are all
running Samba 4.1.4 from the sernet packages.  The member server I am
testing from was fully patched as of this morning.

Things that work:

   - wbinfo -u
   - wbifno -g
   - getent group {ad_group}

Things that don't work:

   - getent passwd {any_ad_user}
   - getent group
   - getent passwd

I jacked up the winbindd debug level to 9, and did some testing.

# wbinfo -n doug
S-1-5-21-1317801521-1647347728-1419337603-1104 SID_USER (1)

# wbinfo -S S-1-5-21-1317801521-1647347728-1419337603-1104
20001

This is the correct UID that is set in AD (RFC-2307).

# getent passwd doug

This gives no output and returns a status of 2.  The winbindd log file
indicates " Could not convert sid
S-1-5-21-1317801521-1647347728-1419337603-1104: NT_STATUS_NONE_MAPPED".

I've done quite a bit of googling with no luck.  I'm stumped on where to go
next.  Any help would be appreciated.

Doug