Incidentally, that may also answer your other question about how to
disable local shadow file passwords.
Any suggestions for migrating accounts from /etc/shadow into the LDAP
database? I tried this LdapImport perl script but it threw a bunch of
errors and ultimately failed:
http://wiki.babel.com.au/index.php?area=Linux_Projects&page=LdapImport