LDAP auth for some users

[Anton Emmerfors <anton@vegasys.com>]

Hi,

I'm in the process of converting authentication (and some other stuff)
to LDAP but not quite ready to put all users into the LDAP directory.
Thus I want pam_ldap.so to authenticate users found in the directory
but pam_unix.so to authenticate local accounts.

Using the current style in /etc/pam.d/login I am asked twice for
passwords which I don't want. So I tried converting to the "new style"
(value=action) but then it won't work at all.

Am I correct in assuming that a "default=ok" is equivalent to
"required"?

Has anyone succesfully used a system like this or am I trying to climb
the wrong tree?

        /regards Anton
-- 
Sig? No, thanks. I don't smoke....