[Samba] Can winbind change passwords in AD

[Ivan Ruskov]

Hi,

I have a question concerning Winbind. When I use winbind as a pam module to
authenticate unix users against an AD Domain Controller can this pam module
be also used to change users' passwords in AD? In other words can the users
change their AD passwords through the winbind pam module?

I'm looking for a way to synchronize users and groups between a Windows
Active Directory domain controller and Linux domain member servers with
Samba 3. The other way around is to synchronize OpenLDAP and AD through a
custom script and use pam_ldap to authenticate linux users agains OpenLDAP
but I'm not quite sure if OpenLDAP supports NTLM hashes.

Thanks 
Ivan