password sync with ldap (samba attrib)

[FM]

Hello,
My ldap server + KRB5  will replace my NIS server and y samba server.

In samba, I can script to update the PRINCIPAL of the users. So not prob 
to sync when changing password from windows machines.

Now, if my user use kpasswd to change his password, it is not in sync 
with the samba password attributes.

Linux stations is using pam_krb5.

Perhaps another pam modules can help me ?

Thanks !