There is very little on the topic on the web and on the Postfix Users archives. The little I find seems to imply it's very difficult to extract password information from AD (say, to sync to OpenLDAP).
Since the last thread about this topic in this group is from last year, I'm asking whether a solution exists at this point. There is a product called PowerADvantage that would seem to do the job, but the fact that they don't post their prices on their website probably suggests that the cost is likely in four figures which exceeds the available budget (I'm checking with them anyway). The environment where I'd need this solution is small, with a dozen or so AD logins, and so I may just have to maintain the domain passwords separately from the mail passwords. AD will be kept around to facilitate resource sharing on the Windows LAN but the mail is moving from Exchange 2003 to Postfix as soon as possible. An OpenSource solution would be preferable, though on Windows/AD side a utility worth few hundred dollars might skirt the budget. Many thanks again for any advice!