Volker, as just discussed: it would be nice if the unprivileged winbind would also be moved to the samba libdir just like the privileged winbind pipe. At the moment it is created in /tmp/.winbind/. /tmp is a waste basket, /tmp could easily be overmounted when sysadmins want to move tmp to a new partition and most important: any user can create a /tmp/.winbind directory while winbind is not running and then winbind refuses to start because the directory has wrong permissions. Why not move it to a sane location like /var/lib/samba/ ? :-)
Seem like this has since been resolved