found 705568 0.9.4-3 quit In 0.9.4-3 revision, Account-Type is Primary, so I applied your changes for the Account: entry, yet neither local nor LDAP users can login (even if LDAP server is reachable), and I found the following in /var/log/auth.log:
Apr 15 18:40:22 myhostname login[13808]: PAM pam_parse: expecting non-zero; [... new_authtok_reqd=done ignore=ignore user_unknown=ignore authinfo_unavail=0 default=bad] -- أحمد المحمودي (Ahmed El-Mahmoudy) Digital design engineer GPG KeyID: 0xEDDDA1B7 GPG Fingerprint: 8206 A196 2084 7E6D 0DF8 B176 BC19 6A94 EDDD A1B7
signature.asc
Description: Digital signature