[Samba] LDAP and tdbsam combined?

[Matthias Leopold]

Hi,

is it possible to use "passdb backend = ldapsam" and have account 
policies and group mapping information in local tdb files on a 
standalone samba 3.6/4.1 server?

i have a readonly ldap server where lots of samba attributes are 
missing. these weren't needed for existing setups with samba 3.6, but 
now i want to use samba 4.1 and to extend functionality (Windows ACLs). 
i want to bother our LDAP admin as little as possible since this LDAP 
tree wasn't designed for samba only and serves lots of other purposes. 
furthermore even write attempts to LDAP are bad because of redirects 
happening from LDAP replication slave to LDAP write master (where i 
can't write either). this doesn't stop samba from working but slows down 
its operation a lot. i've seen this happening with 
ldapsam_set_account_policy() in the logs.

thx for looking into this maybe "unfavourable" setup

matthias