host 192.168.0.30
base dc=testad,dc=mynet
uri ldap://winpc.testad.mynet

ldap_version 3

binddn ldap@testad.mynet 
bindpw secret

port 389

timelimit 120
bind_timelimit 120
idle_timelimit 3600

# RFC 2307 (AD) mappings
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute homeDirectory unixHomeDirectory
nss_map_attribute shadowLastChange pwdLastSet
nss_map_objectclass posixGroup group
nss_map_attribute uniqueMember member
pam_login_attribute sAMAccountName
pam_filter objectclass=User
pam_password ad

ssl no

auth        required      pam_env.so
auth        sufficient    pam_ldap.so try_first_pass
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        required      pam_deny.so

account     sufficient	  pam_ldap.so
account     required      pam_unix.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok
password    required      pam_deny.so

session	    required	  pam_mkhomedir.so umask=0022
session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so

 2631 ?        Rs     1:08 sshd: testuser [priv]

Tasks:  53 total,   2 running,  50 sleeping,   0 stopped,   1 zombie
Cpu(s): 91.0%us,  1.0%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  8.0%si,  0.0%st
Mem:    252620k total,   101896k used,   150724k free,     8520k buffers
Swap:   522104k total,        0k used,   522104k free,    42488k cached

 2631 root      25   0  103m 4488 3376 R 98.9  1.8   1:45.21 sshd  

Apr 21 23:21:01 is1 sshd[2631]: Accepted password for testuser from 192.168.0.20 port 48309 ssh2
Apr 21 23:21:01 is1 sshd[2631]: pam_unix(sshd:session): session opened for user testuser by (uid=0)