Hello all,

I configured a KDC (MIT Kerberos 1.12.1) with an OpenLDAP (2.4.32) Backend. Everything is working fine. We want to migrate smoothly from LDAP password to KDC password. For that purpose, we plan to force user to change their password using ldappasswd command, intercept the password modification with smbkrb5pwd overlay and then change the userPassword attribute for SASL passthrough. I setup up the overlay smbkrb5pwd (last git version) to synchronized LDAP and Kerberos passwords as decribed on

https://github.com/opinsys/smbkrb5pwd

The module is loaded correctly. However, the "ldappasswd" command hangs now. This is apparently due to a locking issue. Is anyone succeeded to configure the overlay ? Is there any other way to synchronize LDAP et KDC passwords when OpenLDAP is used as a Backend ?