and referrals are used together (http://secunia.com/advisories/15906/) mostly from Adrian Portelli, tested by me (The most recent version 242 kills the system completely if the LDAP server is not running -- endless connection retries.)
-support the "getgroupmembership" nsswitch invocation bump PKGREVISION
(passwd and group for now)