Synchronizing credential hashes between directory services

A method comprising:

• receiving, at a synchronization host coupled to a domain mesh, a hash value representative of a plaintext password from the domain mesh, the domain mesh comprising a plurality of domains;
• and
• synchronizing password changes received in the domain mesh with a target directory service by:
• performing, at the synchronization host, an additional hash on the hash value to generate protected password data;
• and
• exporting the protected password data from the synchronization host to the target directory service.

A system comprising:

• a directory service;
• a domain mesh comprising a plurality of domains, each domain including a plurality of domain controllers, and each domain configured to replicate a hash value of a plaintext password entered at a domain controller of a domain to other domain controllers of the domain;
• and
• a host coupled to the domain mesh to synchronize password changes received in the domain mesh with the directory service by:
• determining one of the domain controller from which to retrieve the hash value representative of the plaintext password from the domain mesh;
• performing an additional hash on the hash value to generate protected password data;
• and
• exporting the protected password data to the directory service.