</sect3>
+ <sect3>
+ <title>Using OpenLDAP Overlay for Password Syncronization</title>
+
+ <para>
+ Howard Chu has written a special overlay called <emphasis>smbk5pwd</emphasis>, which modifies
+ <constant>SambaNTPassword</constant>, <constant>SambaLMPassword</constant> and <constant>Heimdal</constant>
+ hashes in an OpenLDAP entry when LDAP_EXOP_X_MODIFY_PASSWD is performed.
+ </para>
+
+ <para>
+ The overlay is shipped with OpenLDAP-2.3 and can be found in the
+ <filename>contrib/slapd-modules/smbk5pwd</filename> subdirectory. This module can be used with OpenLDAP-2.2
+ also.
+ </para>
+
+ </sect3>
+
</sect2>
<sect2>
<smbconfcomment>This requires a PROFILES share that is world writable.</smbconfcomment>
</smbconfblock>
+</sect2>
+
+<sect2>
+<title>Debugging Roaming Profiles and NT4-style Domain Policies</title>
+
+<para>
+Roaming profiles and domain policies are implemented via <command>USERENV.DLL</command>.
+Microsoft Knowledge Base articles <ulink
+url="http://support.microsoft.com/default.aspx?scid=kb;en-us;221833">221833</ulink> and
+<ulink url="http://support.microsoft.com/default.aspx?scid=kb;en-us;154120">154120</ulink>
+ describe how to instruct that DLL to debug the login process.
+</para>
+
</sect2>
</sect1>
</chapter>