[Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

[Konstantin Boyandin]

Hello,

On
http://wiki.samba.org/index.php/4.0:_User_Management
it is described how to set up and use smbldap-tools package. The
question is, how to hide master passwords in such a case?

smbldap-passwd may be called by non-root; thus,
/etc/smbldap-tools/smbldap_bind>conf
must be world-readable, and it keeps the passwords as plain text.

How can I allow users to change their passwords with smbldap-passwd
without compromising the security?

Thanks.
Sincerely,
Konstantin