samba - Oct 2013 - ID mapping not the same between servers - smb and nfs

We mount most of our share though samba but I a server that has the home 
directory mounted though nfs. The ID mappings are not the same. The 
server is joined to the domain. The domain has 2 samba4 servers and one 
win2k8r2 server. The 2 servers in question are CentOS 5.9 x86_64 and 
samba 3.6.19 from sernet.

Any ideas?

Jonn

[global]
     workgroup = TAYLORTELEPHONE
     realm = TAYLORTELEPHONE.COM
     server string = xxxx
     interfaces = eth1, lo
     security = ADS
     log file = /var/log/samba/log.%m
     server signing = auto
     lpq cache time = 20
     printcap name = /etc/printcap
     wins server = 192.168.173.3, 192.168.173.4
     template homedir = /home/%U
     template shell = /bin/bash
     winbind enum users = Yes
     winbind enum groups = Yes
     winbind use default domain = Yes
     winbind refresh tickets = Yes
     winbind offline logon = Yes
     idmap config * : range = 500-4000000
     idmap config TAYLORTELEPHONE:range = 500-4000000
     idmap config TAYLORTELEPHONE:backend = rid
     idmap config * : backend = tdb2
     admin users = "@TAYLORTELEPHONE\Domain Admins"
     inherit acls = Yes
     map acl inherit = Yes
     max print jobs = 100
     printing = bsd
     print command = lpr -r -P'%p' %s
     lpq command = lpq -P'%p'
     lprm command = lprm -P'%p' %j

[printers]
     comment = All Printers
     path = /clustershare/printers
     guest ok = Yes
     printable = Yes
     print ok = Yes
     browseable = No

[print$]
     comment = Printer Drivers
     path = /clustershare/drivers
     read only = No

drwxrwx--- 14          1607 domain admins 3864 Sep 26 09:39 xxxx

/etc/fstab
shr01:/home  /home   nfs      rw,sync,hard,intr  0     0

CTDB file cluster

[global]
     workgroup = TAYLORTELEPHONE
     realm = TAYLORTELEPHONE.COM
     netbios name = SHR01
     server string = Cluster Share
     interfaces = eth0, eth1, lo
     security = ADS
     private dir = /clusterdata/ctdb
     log file = /var/log/samba/log.%m
     server signing = auto
     lpq cache time = 20
     clustering = Yes
     printcap name = /etc/printcap
     wins support = Yes
     template homedir = /home/%U
     template shell = /bin/bash
     winbind enum users = Yes
     winbind enum groups = Yes
     winbind use default domain = Yes
     winbind refresh tickets = Yes
     winbind offline logon = Yes
     idmap config * : range = 500-4000000
     idmap config TAYLORTELEPHONE:range = 500-4000000
     idmap config TAYLORTELEPHONE:backend = rid
     idmap config * : backend = tdb2
     admin users = "@TAYLORTELEPHONE\Domain Admins"
     inherit acls = Yes
     map acl inherit = Yes
     max print jobs = 100
     printing = bsd
     print command = lpr -r -P'%p' %s
     lpq command = lpq -P'%p'
     lprm command = lprm -P'%p' %j


drwxrwx--- 14 xxxx          domain admins 3864 Sep 26 09:39 xxxx

/etc/exports
/clusterdata/home    (sync,no_root_squash,rw)

On all servers

/etc/nsswitch.conf

passwd:     files winbind
shadow:     files winbind
group:      files winbind

hosts:      files dns

bootparams: nisplus [NOTFOUND=return] files

ethers:     files
netmasks:   files
networks:   files
protocols:  files
rpc:        files
services:   files

netgroup:   files

publickey:  nisplus

automount:  files
aliases:    files nisplus

sudoers:  files ldap