- Better defaults for nss_ldap
    - Make sure timeouts are not too high, so that machine does not hang if remote
      servers are not reachable
    - Make sure root can always login no matter what the status of the ldap
      servers
    - use rfc2307bis schema directive