On 07/11/15 23:20, Rowland Penny wrote: > you would need the RFC2307 attributes, something that doesn't happen > on the DC at present. rfc2307 attributes are a reality on DCs and have been ever since their introduction. You just don't use winbind to access them.