That is not a really wise strategy. LDAP is fine for general user accounts when you need to give access to employees on some shared hosts. For production hosts,

That is not a really wise strategy. LDAP is fine for general user accounts when you need to give access to employees on some shared hosts. For production hosts, you often don't want a SPOF such as LDAP for accounts. And I promise you this, the day your LDAP or network will go down, if you don't have at least a single local user to ssh with, you'll regret it.