# at the start and end of sessions of *any* kind (both interactive and
# non-interactive). The default is pam_unix.
#
-session required pam_unix.so
+# Default was:
+#
+# session required pam_unix.so
+
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM
+session required pam_limits.so
+session required pam_unix.so
+session required pam_ldap.so
+
+session required pam_mkhomedir.so skel=/etc/skel umask=0022