[Samba] LDAP integration

[Antony Gelberg]

We're into our new server build.  We have built Samba / LDAP servers
before, but never a PDC.  I'm not sure that this question is
PDC-specific though.

What is the difference between smbldap-useradd, and adding a user to the
LDAP database normally e.g. with cpu useradd?

Are smbldap-tools needed for new installs, or only where an existing
Samba database is being migrated to LDAP?

What is the best practise for the administrator for new installs?  We
plan to join machines to the domain as root.  Is this overly dangerous?
 Do we need to create an admin user and group to join machines?