Great articles! One thought, though: What if the network is down? (or if you're on a notebook) Can the PAM/LDAP solution hold some kind of local password cache or do you need to define all "off-line" accounts locally on the computer? »