The following list of files is still installed when the winbind USE-flag is disabled: /lib64/security/pam_winbind.so /lib/systemd/system/winbindd.service /lib/systemd/system/winbind.service /usr/share/man/man8/winbind_krb5_localauth.8.bz2 /usr/share/man/man8/winbind_krb5_locator.8.bz2 /usr/share/man/man8/pam_winbind.8.bz2 /usr/share/man/man8/winbindd.8.bz2 /usr/share/man/man5/pam_winbind.conf.5.bz2 /usr/lib/python3.12/site-packages/samba/dcerpc/winbind.cpython-312-x86_64-linux-gnu.so /usr/lib/python3.12/site-packages/samba/tests/pam_winbind_setcred.py /usr/lib/python3.12/site-packages/samba/tests/pam_winbind_warn_pwd_expire.py /usr/lib/python3.12/site-packages/samba/tests/pam_winbind_chauthtok.py /usr/lib/python3.12/site-packages/samba/tests/pam_winbind.py /usr/lib/python3.12/site-packages/samba/tests/auth_log_winbind.py /usr/lib64/libnss_winbind.so.2 /usr/lib64/samba/krb5/winbind_krb5_localauth.so /usr/lib64/samba/krb5/winbind_krb5_locator.so At the very least the systemd service should not be installed, given winbindd itself is not. Not entirely sure what else is superfluous.