[Samba] Upgraded a member server to 4.8, rfc2307 data?

[Marco Gaiarin]

I'm starting to upgrade my domain members to debian stretch/samba 4.8,
using louis packages.
Domain controllers still on jessie/samba45.

Upgrade went smooth, but after upgrade seems that the DM was not able
anymore to retrieve rfc2307 data, eg:

  root at vdmsv2:~# getent passwd gaio
  gaio:*:10000:10513:Marco Gaiarin:/home/LNFFVG/gaio:/bin/false

  root at vdmsv2:~# ldbsearch -H ldap://vdcsv1.ad.fvg.lnf.it -P -b DC=ad,DC=fvg,DC=lnf,DC=it "(&(objectClass=user)(sAMAccountName=gaio))"  | egrep -i "(unixhome|shell)"
  loginShell: /bin/bash
  unixHomeDirectory: /home/gaio

smb.conf seems ok to me:

  root at vdmsv2:~# samba-tool testparm
  Press enter to see a dump of your service definitions
  
  # Global parameters
  [global]
	disable spoolss = Yes
	log file = /var/log/samba/log.%m
	log level = 0
	map to guest = Bad User
	max log size = 5000
	netbios aliases = MEDIASV
	panic action = /usr/share/samba/panic-action %d
	printcap name = /dev/null
	realm = AD.FVG.LNF.IT
	security = ADS
	username map = /etc/samba/user.map
	winbind nss info = rfc2307 # Samba 4.5-
	winbind offline logon = Yes
	winbind use default domain = Yes
	workgroup = LNFFVG
	idmap config lnffvg : unix_nss_info = yes	# Samba 4.6+
	idmap config lnffvg : range = 10000-49999
	idmap config lnffvg : backend = ad
	idmap config * : range = 5000-9999
	idmap config * : backend = tdb
	include = /etc/samba/smb.conf.%m

  [...]


What i'm missing?! Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)