LDAP and NT authentication

["Brian Rankin" <brankin@round1.com>]

Hello,

I'm running OpenLDAP 1.2 on Linux -- it's working great.  I'd like to use it
as the authentication source for all ldap-aware systems.  Our network uses
an NT PDC for login authentication, so there are two issues:

1. Replicating the NT passwords stored in the PDC to the LDAP server
2. Ensuring the passwords aren't stored in plain text, but also aren't
encrypted in such a fashion that applications can't decrypt them

Has anyone ever dealt with the issue of using LDAP as the password-source in
a mixed Unix/NT (Solaris, Linux, NT) environment?  Any advice on how to
implement such a scheme would be greatly appreciated. So far, I know that
Unix PAM can authenticate to LDAP, as can http, ftp and samba.  If I can get
the NT piece I just might get this to work...

Sincerely,

Brian Rankin