Man, you saved the rest of my hairs from being pulled out in rage. I've spent 3 days tweaking samba and nsswitch without any success until I found your post. This stuped cisco anyconnect indeed...