Thanks! That's what I've suspected. I'll try to use OpenLDAP backend - it can easily be configured to work securely over the Internet, even with replication. I know that OpenLDAP backend is not the focus of Samba4 team, so I'll try to solve bugs myself...