Bug#656296: Patch for password syncing between LDAP/Kerberos/Samba in Debian Edu

[Petter Reinholdtsen <pere@hungry.com>]

[Mike Gabriel]
> Linux solution: dpkg-divert original password tool and replace by a
> wrapper that points the user to using http://www/gosa

Alternative idea, which work for more use cases, is to use pam_python
to implement a password module that reject the password change and ask
people to use gosa.  This could make sure also GUI tools to change
passwords show the message.

We already use pam_python for other tasks, so it is no new dependency.

-- 
Happy hacking
Petter Reinholdtsen