don't print the hashes etc
make the gecos field the username for want of anything better
store the username and hashes in the main site database
add ldap support to the reconcile script, XXX needs to run as root now for smbldap-userdel...