My samba.schema says
MUST ( uid $ sambaSID )
Now, I don't recall if
> ldap_add: Invalid syntax (21)
> additional info: objectClass: value #4 invalid per syntax
is the error message for failing to meet that MUST. But adding a valid
sambaSID to that ldif might be a good starting point.