[Samba] Samba 4.19 and OpenLDAP

[Shannon Price]

We do not run our campus Active Directory, but our Linux clients authenticate against it. There are several different Unix-based environments on campus, so we cannot use the RFC2307 fields from AD anyway since the answers would not be the same for each group. We have a pilot environment on Ubuntu 24.04 and RHEL 8 that uses SSSD and an OpenLDAP server.  Authentication is against our AD domain, but SSSD pulls the RFC 2307 fields from OpenLDAP.

Samba servers are also NFS servers so we need consistent UID/Group mappings in the whole environment.  NFS is working well with this environment.

Can Samba (version 4.19.4) pull RFC2307 from OpenLDAP (or ask SSSD for the answer)?

Currently:
security=ads
In the Samba wiki documentation, several of the idmap links are empty (or removed?) idmap ldap and nss specifically.  Is this deprecated?

Any advice is welcome.

--
Shannon Price
Auburn University