I'm figuring it's a pam configuration as well; however, since
it's related to ldap authentication,
I'm hoping others in this group might have seen and fixed the problem.
I think you might be on the right track: did you configure both PAM
authentication and account modules to use LDAP PAM libraries? If not,
you should.
Best regards
– Miroslaw Baran