Hi! That would be 3.18.3
Also, consider this PR for 4.2.0 ([NEW] Enable LDAP manual sync to deployments without EE license by rodrigok · Pull Request #23761 · RocketChat/Rocket.Chat · GitHub), and that you can always do group/team/role sync using our REST APIs and some scripting 