Samba-LDAP-PAM question