gate# cat smb.conf 

[global]
        workgroup = CORPX
        security = DOMAIN
       
        winbind use default domain = Yes
        winbind enum users = yes
        winbind enum groups = yes
        winbind cache time = 36
        idmap uid = 20000-40000
        idmap gid = 20000-40000
        template homedir = /home/%U
        template shell = /bin/sh

[gate:~] # /usr/local/etc/rc.d/samba restart

root@gate:~# /etc/init.d/winbind restart

gate# ntlm_auth --username=user1
password: 
NT_STATUS_OK: Success (0x0)

gate# wbinfo -u
...

gate# wbinfo -g
...

gate# cat /etc/nsswitch.conf
…
group: files winbind
passwd: files winbind
shadow: files winbind # for linux only
…

gate# wbinfo -n user1
gate# wbinfo -S …

gate# id user1

gate# chown -R user1:'domain users' /home/user1/
gate# chown user1:'domain users' /var/mail/user1

gate# chown -R user2:'domain users' /home/user2/
gate# chown user2:'domain users' /var/mail/user2