<samba:parameter name="ldap passwd sync"
                 context="G"
                 type="enum"
                 enumlist="enum_ldap_passwd_sync"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

<synonym>ldap password sync</synonym>
<description>
	<para>
	This option is used to define whether or not Samba should sync the LDAP password with the NT
	and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
	change via SAMBA.  
	</para>

	<para>
	The <smbconfoption name="ldap passwd sync"/> can be set to one of three values: 
	</para>
	
	<itemizedlist>
		<listitem>
			<para><parameter moreinfo="none">Yes</parameter>  =  Try 
			to update the LDAP, NT and LM passwords and update the pwdLastSet time.</para>
		</listitem>
			
		<listitem>
			<para><parameter moreinfo="none">No</parameter> = Update NT and 
			LM passwords and update the pwdLastSet time.</para>
		</listitem>

		<listitem>
			<para><parameter moreinfo="none">Only</parameter> = Only update 
			the LDAP password and let the LDAP server do the rest.</para>
		</listitem>
	</itemizedlist>		
</description>

<value type="default">no</value>
</samba:parameter>
