problème configuration ldap

Bonjour,
J'ai un problème (ou plutôt quelques petits problèmes) au niveau de la configuration du serveur samba et de l'annuaire ldap :
Je travaille dans une entreprise asser grande qui a un serveur central en interne et 7 serveurs externes, mon but est d'ajouter un serveur externe et donc j'ai installé samba et openldap, et je dois effectuer une réplication de l'annuaire maitre du serveur central

Je m'excuse d'avance pour la quantité d'information que je vais mettre, ça risque d'être lourd mais ça aidera peut-être à la résolution du problème

Je travaille sous CentOS 5.4 et à partir du gestionnaire de paquetages (packages) j'ai installé :
- ldap-account-manager-2.9.0-0.fedora.1.noarch
- samba-3.0.33-3.15.el5_4.1.i386 (serveur)
- samba-client-3.0.33-3.15.el5_4.1.i386
- samba-common-3.0.33-3.15.el5_4.1.i386 (fichiers utilisés par le client et le serveur)
- system-config-samba-1.2.41-5.el5.noarch (outil de configuration du serveur samba)
- nss_ldap-253-22.el5_4.i386 (bibliothèque NSS et module PAM pour LDAP)
- openldap-2.3.43-3.el5.i386 (fichier de configuration, bibliothèque et documentation pour LDAP)
- openldap-client-2.3.43-3.el5.i386
- openldap-servers-2.3.43-3.el5.i386
- 1:perl-LDAP--0.33-3.fc6.noarch (module perl LDAP)
- php-ldap-5.1.6-24.el5_4.5.i386 (module pour applications PHP utilisant LDAP)
- python-ldap-2.2.0-2.1.i386 (API orientée objet pour accéder aux serveurs d'annuaires LDAP)

J'ai donc /etc/samba/lmhosts
/etc/samba/secrets.tdb
/etc/samba/lmhosts/smb.conf
/etc/samba/lmhosts/smbusers

(pour alléger le contenu j'ai supprimé les info en commentaires, j'ai laissé le plus important)
fichier smb.conf :

#======================= Global Settings =====================================

[global]

# ----------------------- Network Related Options -------------------------
#
# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
#
# server string is the equivalent of the NT Description field
#
# netbios name can be used to specify a server name not tied to the hostname
#
# Interfaces lets you configure Samba to use multiple interfaces
# If you have multiple network interfaces then you can list the ones
# you want to listen on (never omit localhost)
#
# Hosts Allow/Hosts Deny lets you restrict who can connect, and you can
# specifiy it as a per share option as well
#
workgroup = PROJETSAMBA
server string = Serveur aartaud

netbios name = srv_aartaud

; interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
hosts allow = 126.1.0.101

# --------------------------- Logging Options -----------------------------
#
# Log File let you specify where to put logs and how to split them up.
#
# Max Log Size let you specify the max size log files should reach

# logs split per machine
; log file = /var/log/samba/%m.log
# max 50KB per log file, then rotate
; max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
# Security can be set to user, share(deprecated) or server(deprecated)
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.

security = user
passdb backend = ldapsam:ldap://172.17.21.30
ldapsam:ldap://126.1.0.101


# ----------------------- Domain Members Options ------------------------
# Use password server option only with security = server or if you can't
# use the DNS to locate Domain Controllers
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
# password server = *


; security = domain
; passdb backend = ldapsam:ldap://172.17.21.30
; ldapsam:ldap://126.1.0.101
; realm = MY_REALM

; password server = <NT-Server-Name>

# ----------------------- Domain Controller Options ------------------------
#

; security = user
; passdb backend = ldapsam:ldap://172.17.21.30
; ldapsam:ldap://126.1.0.101

domain master = no
domain logons = no

# the login script name depends on the machine name
logon script = %m.bat
# the login script name depends on the unix user used
logon script = %u.bat
logon path = \\%L\Profiles\%u
# disables profiles support by specifing an empty path
; logon path =

add user script = /usr/sbin/useradd "%u" -n -g users
add group script = /usr/sbin/groupadd "%g"
add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
delete user script = /usr/sbin/userdel "%u"
delete user from group script = /usr/sbin/userdel "%u" "%g"
delete group script = /usr/sbin/groupdel "%g"


# ----------------------- Browser Control Options ----------------------------
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; local master = no
; os level = 33
; preferred master = yes

#----------------------------- Name Resolution -------------------------------
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups.

; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes

; dns proxy = yes

# --------------------------- Printing Options -----------------------------

load printers = yes
cups options = raw

; printcap name = /etc/printcap
#obtain list of printers automatically on SystemV
; printcap name = lpstat
printing = cups
printcap name = cups

# --------------------------- Filesystem Options ---------------------------

; map archive = no
; map hidden = no
; map read only = no
; map system = no
; store dos attributes = yes


#============================ Share Definitions ==============================

[homes]
comment = Home Directories
browseable = no
writable = yes
; valid users = %S
; valid users = MYDOMAIN\%S

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes

# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
; comment = Network Logon Service
; path = /var/lib/samba/netlogon
; guest ok = yes
; writable = no
; share modes = no


# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
; [Profiles]
; path = /var/lib/samba/profiles
; browseable = no
; guest ok = yes

;Mot de passe administrateur LDAP
ldap admin dn = "cn=admin,dc=epsm-lille-metropole,dc=fr"

# A publicly accessible directory, but read only, except for people in
# the "staff" group
; [public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; writable = yes
; printable = no
; write list = +staff

================================== FIN ==================================

et les daemons smbd et nmbd démarrent bien

/etc/openldap/cacerts/
/etc/openldap/DB_CONFIG.example
/etc/openldap/ldap.conf
/etc/openldap/slapd.conf
/etc/openldap/schema/

=> Je ne sais absolument pas comment résoudre le problème (j'ai pu trouver des forums qui en parlaient mais en aucun cas la doc était explicite

De plus j'aimerai savoir comment importer le schema de samba dans /etc/openldap/schema