samba - Dec 2015 - Samba AD - 2-factor authentication best practice 2016

Hi list,

I'm wondering about some best practices when it comes to 2-factor 
authentication on a Samba AD DC.

Though I'm not fixed on them, I'd preferably use Yubikeys. I did find a 
corresponding project on Github called yubikey-ldap/samba4-schema, but 
the last update was made 3 years ago.

So, would be glad to hear how some of you handle it, which tokens you 
use and how you set it up.

Thanks,
Viktor