The Open LDAP account provider has no options to set share permissions. You can’t use ACL file permissions if you use OpenLDAP account provider.
If your goal is too set share permissions you have to go with Samba4 AD account provider.
If I want only a workgroup, I can’t have the full configuration of shared folders.
If I want the full configuration of shared folders i have to setup a domain.
Because I think that’s superflous setup a domain when there are only few users or when I have to integrate the server in a already existent lan where I don’t have the full control or where I have to reconfigure a lot of things, etc…
I understand in this scenario the additional IP required by nethserver-dc could be a limitation.
We could tweak its network configuration, to bind an internal virtual adapter and make the DC disappear completely from the LAN, or assign it to a different subnet and add an IP alias for the server itself.
I think that your point of view could be acceptable but sometimes you need to make choices and as @giacomo already said we have discussed that a lot openly and transparently.
By now, we couldn’t technically do more and I hope that you are able to get the complexity here since we have changed many things with the 7 version.
Honestly, I think that your “I don’t like that” doesn’t respect our discussions, I encourage you to keep the topic positive and constructive