[Samba] Samba v3 works with LDAP, but not Samba v4

[Emil Henry]

HI Andrew!

> The user 'johndoe' seems to be rejected because it has the wrong SID.
>
> It is the group in this case, we changed the rules to make them
> stricter a while back, the primary group needs a group mapping entry
> matching the SID of the standalone server.
>

How would I match the Primary Group without breaking the existing Samba
server that connects to this LDAP server? That samba server does not belong
to me, and may stay at v3 for a while longer.

Thanks!