s4:winbind - use "unsigned" variables where possible