passdb backend = ldapsam:ldap://localhost
read only = yes
ldap suffix = dc=example,dc=com
ldap user suffix = ou=people
ldap admin dn = cn=admuser,ou=admgroup,dc=example,dc=com
ldap ssl = no
ldap passwd sync = yes

netbios name = EXAMPLE
netbios aliases = EXAMPLE2
obey pam restrictions = Yes

# apt-cache show libnss-ldap |grep ^Recommends
Recommends: nscd, libpam-ldap

nscd --invalidate group