Thanks for testing!
I recently recognized that there is a nethserver-dc/sssd in testing which makes AD support simple LDAP auth:
I didn’t test it, but this way we maybe don’t need the extra savaaduser.