* standard domain joining process via winbind
* make sure ldapsearch utility is in place, openldap-clients package on centos
* tasks like "Static Group Synchronization" will have some hidden gems like LOGIN, takes form similar to "CN=connect-user,CN=Users,DC=your-domain,DC=com" depends on your LDAP structure.