I have 50k accounts in ldap and I'm using samba 3 and pam/nsswitch for authentication and user info. I basically dont want user logging directly into the box. I did this by turning the authentication part off in pam. Am I missing something or could anything cause me problems down the road. Thanks