we should have supportedLDAPPolicies in our rootdse. A patch for that was submitted to samba-technical here: https://lists.samba.org/archive/samba-technical/2020-March/134948.html
Created attachment 16264 [details] the patch in question
Comment on attachment 16264 [details] the patch in question I think we should implement like this in the rootdse module, or we need dbcheck to fix existing setups. But I think these are more properties of the running software instead of a persistent state.