On Wed, 2010-07-14 at 21:05 -0600, Brian Marshall wrote: > So, when LDAP is down I can clearly see that nscd is caching passwd > but not shadow. --- ""if getent shadow as root returns a shadow file with passwords, then the PAM unix module can do authentication without using libpam-ldap"" So that may just be that you need libpam-ldap. So your problem maybe is PAM? John