As an aside, if you're interested in doing Kerberos and LDAP together with a 389-ds backend you may want to look at the FreeIPA project which handles a lot of the integration for you. It also supports storing SSH keys.

rob

Freeipa looks very very nice indeed, but it doesn't look like it's built and available for ubuntu :(