The text f57baba212bd, as Debian 9 (Stretch) shipped it.
Samba's idmap_nss Backend for Winbind
idmap_nss(8) on Linux now