I have added a Linux machine to AD via samba 4. I've added the winbind to nsswitch mapping but it has turned out that there is a user
root in the domain.
I have workaround it in pam by pam_succeed_if but I cannot find a way to avoid adding groups to root user. Is it possible to exclude all users with uid below 1000 from winbind mapping?