[Samba] Samba 4 and Debian

[steve]

> 
> The problem is that I have no idea what options are still relevant for
> Samba 4 and which aren't. idmap configuration like suggested for samba
> 3.x doesn't seem to have any effect on this problem, e.g.


As soon as you start using a separate database for uid:gid information,
you are asking for trouble IMHO. So why not just stick to what you
already have, put uidNumber in AD (alongside the actual user where it
belongs) and use sssd to map domain user information? It works the same
on the DC as it does on a file server, the same as on a client. Forget
winbind. It seems to need a different configuration for each machine you
join to the domain.
https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd
HTH
Steve