There is a out of the box product for that available,btw: The UCS@school environment does exactly what they want, using only Open source products. It basically joins OpenLDAP,Samba,Keycloak,etc. together. Works both with Windows as well as Linux clients.