A couple of questions about Zimbra 6.0.x + Samba

[borispr]

I've done it according UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI 6.0 - Zimbra :: Wiki

I have created zmposixroot as described but I cannot add host via smbldap-useradd -W computername$
If I change /etc/smbldap-tools/smbldap_bind.conf to "cn=config" it works.
What additional permissions zmposixroot needs to have?

For existing users I need manually add necessary attributes.
SambaSID is among them. In the web interface I see that it has domain SID plus 4 digits suffix and this suffix is different for different users. How to know or calculate it?
Also for successful authentication account needs to have valid SambaNTPassword. It is filled for new users, also it is filled if to change password for existing user but I don't want to change password for all users. Is it a way to generate it from existing userPassword?

Sorry if that was already discussed but I could not find it via search.

[mickier]

did you find these answers?
specifically on the passwords, I don't know if there is a way to do that, but I reset the passwords. I seem to remember that once I change it from admin, they can change it from their webgui and it changes in samba, but just having them change it from their webgui didn't set the smbpassword (at least that's how I remember it)... made it a pain...
but it's so worth it now!

[borispr]

1. SambaSID suffix is 2*UID+1000
2. As I remember in Zimbra 5 passwords were stored in the ldap as clear text. I Z6 the hash is stored. So the way is to change/re-enter password