[Samba] Active Directory clients in DMZ

[shacky]

Hi.

I have two Samba 4 Domain Controller in the LAN network, and I need to
join some Windows clients from the DMZ network.

I read the document at
https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD#Authentication_against_AD_through_openLDAP_proxy
and it tells about an OpenLDAP proxy to authenticate some external
services through it, but I need to join some Windows clients so I
think I cannot use it, can I?

So could you advise me what a best practice could be?

Thank you very much!
Bye