Migrating from pam-ldap

[Philip Prindeville <philipp_subx [at] redfish-solutions.com>]

Hi,

I'm in the midst of pivoting from from pam-ldap to nss-ldapd and had a few 
questions.

First, is there an equivalent of "groupdn" that can be configured?

Second, running OpenLDAP in debug mode, I'm seeing a *lot* of traffic.  I 
thought the whole point of nslcd was to do caching to reduce traffic?  Do I 
need to configure anything explicitly to have caching work?

Is there a how-to that covers authenticating Ssh not by password, but by public 
keys (if they're stored in LDAP)?

Thanks,

-Philip