> If I'm not completely wrong, winbind does all this. See
> "idmap backend = ad" and "winbind nss info = rfc2307".
>
>
Well it does - but only for "passwd" and "group" NSS databases. It can
not handle other databases like services, protocols, networks..... :-(
Ondrej