See the Setup Samba as an AD Domain Member and Identity Mapping (idmap) for infomation about Winbindd.