This plugin synchronizes passwords changed via kadmin or kpasswd to a foreign realm via the Kerberos password change protocol (normally, but not necessarily, an Active Directory realm). It can also propagate changes to the DISALLOW_ALL_TIX flag to Windows Active Directory using LDAP.

This package provides a plugin for the MIT Kerberos KDC and will not work with Heimdal.