[PATCH] ldap account separation patch

[Shahms E. King]

You're probably right, but the patch does make things a little more
flexible, while not breaking existing installations (if only "ldap
suffix" is set, "ldap machine suffix" and "ldap user suffix" are set to
whatever it may be), however, I can still see some use for it for those
people who don't want to have to set up the posixAccount stuff first. 
Can't really defend the patch other than to say it would certainly have
made my life as an administrator easier when I was first trying to get
all of the LDAP stuff setup and working.  Being able to set up samba so
that I only have to run a single command to create a complete machine
account and put it in the "right" spot rather than doing each half
separately is, I would think, I good thing.  (Although I completely
understand your stance on preventing a glut of configuration options in
that already crowded space)

--Shahms