s3: go straight to winbindd_dual_pam_auth() in case of !NT_STATUS_OK