On 8 Mar 2019, at 07:11, Janet H <houser(a)nso.edu> wrote:
I want to be able to change the LDAP password (userPassword) and have that then update
the sambaNTPassword.
I have been googling for days and ran across the suggestion to use the smbkrb5pwd overlay
but that looks specific to openldap and not DS-389.
I know there must be a way to update the userPassword field and have that push out to the
samba password but I can't find anything useful.
Sad to say, this feature is not available today. I have wanted to implement it for a
number of years due to the integration with freeradius for wifi, but it has just never
come up as a priority.
To do it “properly” we want to rearchitect the password handling in 389 to be more “pam
like” first, so that modules for this kind of functionality can be easier developed.
—
Sincerely,
William Brown
Software Engineer, 389 Directory Server
SUSE Labs