- make pam_localuser sufficient after pam_unix in account management, to allow
      local users in even if network connections to the LDAP directory are down (the
      network users should fail when pam_ldap returns a system error)