Reinstallo samba che era un po che non funzinava in “join ads”. Alla fine dopo due giorni di test ecco il problema
winbindd_pam_auth_crap: sam_logon returned ACCESS_DENIED. Maybe the trust account password was changed and we didn't know it. Killing connections to domain
e la soluzione
client schannel = no