[Samba] Password synchronization from database

[Rowland Penny]

On Tue, 2022-04-19 at 13:20 -0300, Bruno Marchioro via samba wrote:
> Hello Rowland,
> 
> We use LDAP for authentication to various systems and services.
> Switches,
> radius, firewall, ticketing system, linux (PAM) printing service,
> among
> others.

You could probably use AD to authenticate most, if not all, of those.

> 
> Our problem is that registering users, passwords, resetting passwords
> and
> everything else is centralized in a system that saves it in a SQL
> database
> and not in LDAP or AD as it should be.

Samba provides the option to sync passwords from AD to an external
program, usually ldap. Tranquil IT used to provide a script, but I
couldn't find it with a quick search.

> 
> We already sync this data, including password, with LDAP without any
> problems. But we couldn't find a way to send the already encrypted
> password
> to Samba 4.

The sync is usually done in the other direction, the AD password is
changed and this runs a script to update the password on your external
database.

Rowland