[Samba] Remote linux auth vs samba4: winbind or nslcd + openldap.

[Andres Tello Abrego]

I'm lost in documentation.

I setup a samba4 AD, and configured winbind so I can have local
authentification using pam, I can now login to AD users vía ssh.

I want to achieve the Holy Gria of 1 source of users and password, for
both, linux and windows machines, but I'm lost in documentation.
So far I know:
samba4 cann't use openldap as backend.
samba4 ldap doesn't really is a full ldap.
samba4 provides uid/gid mapping using winbind or nlscd

So far, I'm using winbind and I can see the samba ad users added to the
password database executing:
getenv passwd

But, after that, I'm lost.
Can I impelement "remote winbind" at remote linux client machines?
Do I need to setup a openldap proxy?
If I setup an openldap proxy, should I use winbind or nslcd?
openldap now uses automatic configuration, any clue to implement the
openldap proxy with this type?

Thanks...