I'm figuring it's a pam configuration as well; however, since it's related to ldap authentication, I'm hoping others in this group might have seen and fixed the problem.
I think you might be on the right track: did you configure both PAM authentication and account modules to use LDAP PAM libraries? If not, you should.
Best regards – Miroslaw Baran