[Samba] NT_STATUS_LOGON_FAILURE with ldap backend

[Luca Ferrari]

On Tuesday 26 February 2008 Adam Williams's cat, walking on the keyboard, 
wrote:
> did you run smbldap-populate?  even with a user in ldap, that is for
> their posix (linux shell) account.  you will still need to run smbpasswd
> -a user to add their samba NT and LM hashes and samba SID info to ldap.
>

Thanks Adam,
populating and using smbpasswd -a solved the problem, but now I'm a bit 
confused: if I want to change my users' info (password, etc) I need to use 
the smbldap-xxx scripts and that will change both the samba and ldap (unix) 
information? In other ways, the needing for a smbpasswd -a is required only 
as "init" step, or each time I change a password I need to use again 
smbpasswd? Moreover, what happens if I change a password using smbpasswd and 
not the smbldap-xxx? The samba account becomes unaligned with the ldap one?

Thanks,
Luca