I have samba and Winbind over ubuntu server with the following smb.conf
[global]
## Browsing/Identification ###
# Change this to the workgroup/NT-domain name your Samba server will part of
workgroup = WORKGROUP
password server = 192.168.1.1
# security = ADS
winbind use default domain = yes
# This will prevent nmbd to search for NetBIOS names through DNS.
dns proxy = no
log file = /var/log/samba/log.%m
# Cap the size of the individual log files (in KiB).
max log size = 1000
syslog = 0
# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
#pam password change = yes
username map = /etc/samba/smbusers
map to guest = bad user
if i try to uncommend the "secutiry = ADS" when restart winbind dont start