I have winbind up and running. wbinfo -g and wbinfo -u can resolve domain users and groups getent only brings back local unix users and groups. I have: /etc/nsswitch.conf: passwd: files winbind group: files winbind /lib/libnss_winbind.so /lib/libnss_winbind.so.2 /lib/security/pam_winbind.so # Global parameters [global] workgroup = LABOR realm = LABOR.AK server string = Samba3 on ANC-Gentoo1.4 security = ADS #hosts allow = load printers = yes password server = * log file = /usr/local/samba/var/log.%m max log size = 50 name resolve order = wins bcast socket options = SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 0 preferred master = no local master = no domain master = no wins support = no wins server = 192.168.1.20 dns proxy = yes #winbind separator = + winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes template homedir = /home/%U template shell = /bin/bash winbind use default domain = yes #client signing = yes #server signing = yes #client use spnego = yes debuglevel = 1 [test] comment = test path = /tmp read only = yes guest ok = yes