pam_check_host_attr and pam_check_service_attr when LDAP down

[Ezsra McDonald <ezsra_mcdonald@yahoo.com>]

Greetings everyone,

I just want to confirm that I understand these two
settings.

For them to work the pam ldap account entry has to be
set to 'required'. If pam ldap account is required
then if LDAP is down no one, not even locally defined
users, can login.

Is my understanding of these settings correct?

Is there a way to allow locally defined users to login
if LDAP is down? 

Good day,
--Ezsra

__________________________________
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools