SSSD integration would be useful. This could be implemented as `samba.sssd` (software) and `samba.sssd-ad` (active directory integration) states.