[Samba] Samba 3.0 + LDAP userPassword -> sambaNTPassword manual sync?

[Adam Williams]

> This may be more of a question for the OpenLDAP mailing list.. but does
> anyone know of a method (perhaps using slappasswd?) to hand-sync userPassword
> attributes to sambaNTPassword attributes?

No, this is not possible unless your userPassword values are in clear
text.  But you could set it up to write the ntpassword and lmpassword
when they login to get thier mail,  thus building up a password
database. 

> Deploying Samba 3.0 as pdc pretty soon, used Migration Tools on the mail
> server soon, and I'd really like to be able to tell people to log in using
> their mail credentials, as opposed to a generic password that they might
> not ever change, resulting in the ever-unfun activity of tracking people
> down and berating them until they change it  (This was hard enough the
> first two times).

So set a password policy that requires password change, password
expiration, and password history.  Samba 3.0.0 supports all these.