diff --git a/samba/manifests/init.pp b/samba/manifests/init.pp
index b1aa4da..8b50768 100644
--- a/samba/manifests/init.pp
+++ b/samba/manifests/init.pp
@@ -107,3 +107,25 @@ class samba::domainmember {
     }
 
 }
+
+
+# Set LDAP auth password to samba.
+#
+# === Global variables
+#
+#   $samba_ldap_pass:
+#       Password to set in samba secrets.
+#
+class samba::ldap {
+
+    include samba::server
+
+    exec { "smbpasswd -w":
+        command     => "smbpasswd -w '${SECRET}'",
+        environment => "SECRET=${samba_ldap_pass}",
+        path        => "/bin:/usr/bin:/sbin:/usr/sbin",
+        unless      => "tdbtool /etc/samba/secrets.tdb keys | fgrep 'SECRETS/LDAP_BIND_PW/'",
+        require     => Package["samba"],
+    }
+
+}