Can I configure a Samba server to authenticate against an external LDAP server? If yes do I still need to define users on both, the Samba server and the ldap server, before they can access Samba shares or is it enough to have them only on the LDAP server?