Things are still not working, but I have learned this. In smb.conf, the line:
ldap admin dn = cn=Manager,dc=gray,dc=uchicago,dc=edu
will work, as long as the password set in secrets.tdb (done with smbpasswd -p password) is the same as the encrypted one in slapd.conf.