I have an OpenLDAP server in place that is doing UNIX authentication for a bunch of servers.

I'd like to add authentication for the Samba server to it as well, but most of the HOWTOs show a method that creates a whole new group of usernames - I don't want that, I want to use the existing user objects I have. What's the point of using LDAP if I have to maintain two account objects anyway?

Now, if I have to add additional objectClass to the user object, and have a separate entry for password because the crypt/ssha password that UNIX uses is incompatible, so be it. It's not ideal but at least it's less hassle than two separate objects.

Can anyone point to some documentation and/or a HOWTO that works for pre-existing LDAP installations?