A bit more context. In trixie release cycle, samba-ad-dc package has been split out of samba package, to provide AD-DC (Active Directory Domain Controller) functionality on top of samba. This new package depends on other samba components, including winbind, and recommends libpam-winbind. And finally, in order to avoid breaking existing setups, samba package recommends samba-ad-dc (since this functionality was in samba package before).
Now, on upgrade from bookworm to trixie, with apt recommends enabled (which is the default), the system install new recommended packages too, including samba-ad-dc and its recommendations, which includes libpam-winbind. Which produces that message. Since the samba-ad-dc split-out is mentioned in the release notes, I probably could've drop recommending it from samba package. But I thought it's safer to keep the recommends. Without knowing there's a bug in libpam-winbind with such an effect. /mjt

