[Samba] OpenLDAP,heimdal kerberos,sasl, wich order?

[Adam Tauno Williams]

> > http://www.math.gatech.edu/~dijuremo/ldap/
> However, you can add Kerberos to your existing Samba LDAP server.  That
> is, if you run Heimdal 0.6.1 (or better still a snapshot) you can use
> your sambaNTpassword as the type 23 encryption key, and have
> linux/unix/OSX clients use kerberos.

Just curious is Heimdal will honor account flags like locked or
disabled?  And does it update/use the password can/must change
attributes (for expiration, etc..)?