re-added "winbind:ignore domains" patch