$ winbindd --version
Version 4.2.10

$ cat /etc/samba/smb.conf

[global]
#--authconfig--start-line--
   workgroup = MEDITURE
   password server = dc01.mediture.dom dc03.mediture.dom dc02.mediture.dom dc04.mediture.dom
   realm = MEDITURE.DOM
   security = ads

   template homedir = /home/%U
   template shell = /bin/bash

   winbind use default domain = true

#--authconfig--end-line--
   server string = Samba Server Version %v

   # logs split per machine
   log file = /var/log/samba/log.%m
   # max 50KB per log file, then rotate
   max log size = 50

   passdb backend = tdbsam

   winbind refresh tickets = yes
   winbind offline logon = yes
   winbind use default domain = yes
   winbind nss info = rfc2307
   winbind enum users = yes
   winbind enum groups = yes
   winbind nested groups = yes

   kerberos method = secrets and keytab

   idmap config *: backend = tdb
   idmap config *: range = 90000001-100000000

   idmap config MEDITURE: backend = ad
   idmap config MEDITURE: range = 10000-49999
   idmap config MEDITURE: schema mode = rfc2307