...
unix password sync = Yes
workgroup = WIN2012
#имя домена
realm = WIN2012.RBT
security = ADS
...
winbind cache time = 1440
#имя сервера AD
password server win-8d2bo7ujh4s8d2bo7ujh4s
2. Привести конфигурационный файл /etc/security/pam_winbind.conf:
[global]
debug = no
debug_state = no
...
silent = yes
mkhomedir = yes
...