[nssldap] restricting users to certain hosts?

[Adam Williams <awilliam [at] mdah.state.ms.us>]

I've got several servers...arrowhead, archives3, saxon, etc.  I want to 
prevent the users from ssh'ing into certain servers.  some should only 
be able to ssh to arrowhead, others only to archives3, some can access 2 
out of the 3, or all 3, etc.  Is it possible to have this 
configuration?  If so, how?