{
# The following are needed to allow password changing from Windows to
# update the Linux sytsem password also.
# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
# NOTE2: You do NOT need these to allow workstations to change only
#        the encrypted SMB passwords. They allow the Unix password
#        to be kept in sync with the SMB password.

    if ( ($ldap{Authentication} || 'disabled') eq 'enabled')
    {
        $OUT .= <<EOF;
unix password sync = no
pam password change = no
EOF
    }
    else
    {
        $OUT .= <<'EOF';
unix password sync = Yes
pam password change = Yes

passwd program = /usr/bin/passwd %u 
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
check password script = /sbin/e-smith/samba_check_password
EOF
    }
}
