{

    if ($smb{ServerRole} eq 'classic primary domain controller' || $smb{ServerRole} eq 'standalone'){
   
    

        $OUT .= <<'EOF';
unix password sync = Yes
pam password change = Yes

passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
check password script = /sbin/e-smith/samba_check_password
EOF
    }
}

