[Samba] ldap password sync

[Adam Williams]

> >> What is the different between  ldap password sync and unix password
> >> sync when I'm using nss_ldap?
> > The former connects to LDAP directly and uses the
> > password extended operation to change the value of userPassword.
>   ^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Is it standard mechanish in ldap?

What does "standard" mean?  I think the answer it "pretty much".

http://nimbus.ocis.temple.edu/ldap/extendop.htm

>  is it supported by all ldap server?

All? Beats me.  Most I think.

> FYI, I'm using OL 2.1.22

Yes, OpenLDAP has supported this mechanism for a very long time.

> > The later is a chat/expect mechanism that can drive virtually any
> > password change mechanism (usually PAM I suspect).
> > The former method is certainly faster and more reliable.
> Update ldap password using what? 

The LDAP API!

> something like ldapmodify?

No.

>  how it can
> know which attribute need to be updated?

http://www.faqs.org/rfcs/rfc3062.html