[Samba] winbind requires restart after boot

[Gary Casterline]

I'm running samba 4.5.6 on Fedora 25 installed from packages as a  member
server in ad.
After a reboot, 'id username' (where username is an AD account) returns
nothing.
A 'systemctl restart winbind' and voila!   'id username' shows what it
should.

I've been looking into the files in
/etc/systemd/system/multi-user.target.wants/
and have backed off.

I tried adding a @reboot systemctl restart winbind
line to cron -- didn't help.

Has anyone else run into this?   Thanks. _Gary


nsswitch.conf:
passwd:     files winbind
shadow:     files
group:      files winbind

[root]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (4096) to minimum Windows limit (16384)
Processing section "[printers]"
Processing section "[homes]"
Processing section "[g42]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

# Global parameters
[global]
        realm = DOM.X.Y
        workgroup = DOM
        log file = /var/log/samba/%m.log
        load printers = No
        server max protocol = SMB2
        unix extensions = No
        client ipc signing = required
        client signing = required
        security = ADS
        server signing = if_required
        socket options = TCP_NODELAY TCP_KEEPCNT=4 TCP_KEEPIDLE=240
TCP_KEEPINTVL=15
        template shell = /bin/bash
        winbind use default domain = Yes
        rpc_daemon:spoolssd = fork
        rpc_server:spoolss = external
        idmap config campus : base_rid = 0
        idmap config campus : range = 10000-10000000
        idmap config campus : backend = rid
        idmap config * : range = 3000-7999
        idmap config * : backend = tdb
        use sendfile = Yes
        write cache size = 262144


[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = No
        printable = Yes
        create mask = 0700


[homes]
        comment = Home Directories
        browseable = No
        inherit acls = Yes
        read only = No
        valid users = %S %D%w%S


[g42]
        path = /var/spool/samba
        printable = Yes
        printer name = HP-LJ-300-400-color-M351-M451-Postscript