[Samba] Synchronising password of some AD users with an external LDAP?

[Gregory Sloop]

PLJJ> I know that if I were running a Windows AD, I could most likely
PLJJ> accomplish what I want with--if nothing else--the 389 DS by using
PLJJ> DS-provided Password Sync Service (see
PLJJ> https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Windows_Sync-Configuring_Windows_Sync.html
PLJJ> for more information).

This is way over my head, in terms of expertise - but since the AD
should function identically to the Windows AD setup, it may well work
just fine, even though the back-end isn't a Windows AD box, but a
Samba4 AD.