Password Replication Active Directory - ABAP Backend

Dear board,

my potential scenario looks like the following. There is a Single-Sign-On environment in place using Kerberos in the Windows world and for authentication at the SAP Enterprise Portal. As our application servers are on Unix, SPNego/SAP Logon Tickets are used further on for SSO to the backend systems.

For situations like administrative access using SAP Gui or Active Directory / Enterprise Portal downtime direct access to the SAP backend systems may be needed. As I do really mind setting up /managing users locally, I'm looking for a way to replicate the users password stored in the Active Directory to the ABAP user store for that case. Is there a way to do that?

Kind regards and many thanks,

R.