onlinecrash24/SAMADCON ? reverse-engineered prompt

Build me a browser based Samba AD management console that can replace the usual Windows RSAT tools for a Samba AD DC domain.

I want to sign in with my own AD account, connect over standard protocols, and manage the common stuff from one web app, like users, computers, organizational units, DNS, sites and services, and group policy. The group policy editor is the big thing, so please include a real policy window with the usual tabs for administrative templates, security settings, preferences, scripts, folder redirection, and the Samba or VGP tree. It should feel like MMC, with separate tabs for the different consoles, right click actions on objects, and drag and drop to link a GPO to an OU.

Make it work in Docker, keep the backend and frontend clean, and let it talk to one or more domains at login. If you need to look up current docs online while wiring up Samba, LDAP, Kerberos, or SMB, go ahead.