unix -> nt passwd sync

[Sebastien Boving]

Hi,

We run a site of about 500 workstations (windows and many flavors of
unix). We use Samba to let windows people access their unix homedirs and
the network printers. The windows clients make use of a NT DC for
authentication. The unix clients all use NIS. 

I wish to find a solution to synchronise both, and to use encrypted 
passwords for our samba servers.

Following program to change a users password would do it:

(- in unix: ask the user to change his password)
(- change the NIS unix password)
(- also nt hash the cleartext password (with smbpasswd))
- send this nt hash of the password to a NT DC (with authentication).
- make the registry changes in the DC.

(The first 3 steps are optional, i could easily implement them myself)

I would configure the Samba servers to use the NT DC for authentication,
and forbid users to change their passwords under NT.

Since this is an old issue, i was wondering if someone already
implemented a script/program which would do this (or has any remarks
about this way of achieving passwd synchronisation). I read about the
pwdump program. What i would like to achieve is just the opposite.

thanks in advance,
Sebastien Boving.

-----------------------------------------------------------------------------
Sebastien Boving                       Departement van Elektrotechniek - ESAT
Kardinaal Mercierlaan 94                             Toegepaste Wetenschappen
B-3001 Heverlee.                               Katholieke Universiteit Leuven
Tel.: +32-16.32.10.80                                   Fax.: +32-16.32.19.86 
boving at esat.kuleuven.ac.be             http://www.esat.kuleuven.ac.be/~boving
-----------------------------------------------------------------------------