See the Setting up Samba as a Domain Member and Identity Mapping (idmap) for infomation about Winbindd.