With regards to Tumbleweed, AD joined host, winbind will no longer start
This is due to bug reported here: https://bugzilla.samba.org/show_bug.cgi?id=15972
TW is currently (as date of this post) at 4.24.3+git, and I suspect the fix might be in 4.24.4.
In short, supplemental groups are not processed for users. This breaks settings where group memberships involved groups from Samba winbind (e.g. Active Directory in the case of a domain joined host).