kerberized pam_winbind logon with trust domain account on samba pdc not possible. The main cause is that when we are a PDC with trusts to AD domains, we don't have lp_realm() set (which is incorrectly expected to be set by some functions).