I note that sssd depends on samba APIs that can change every major samba release(11 to 12 etc). Maybe samba should have a subslot?