This recent Microsoft’s Patch 
https://lists.samba.org/archive/samba/2016-August/202197.html

disable password change for all server Domain Controller NT4 Style, Samba 3 and 4 included.

Then is urgent to enable, into Samba 4 CentOS package by default support to AD-DC mode, or release another renamed packages with AD-DC
support enable.

For now, I must download the samba.src rpm, modify the spec file

then rebuild the package after all update.

My question is:

There is some hope that in the short this flags are enable by default?

Many thanks for your reply

—
Dario Lesca
(inviato dal mio Linux Fedora 24 Workstation)