> > Have you looked at security/pam-ldap in pkgsrc?
>
> Yes, but there are two problems:
>
> * it seems that neither sshd, nor login or su, are compiled with PAM
> support (ldd /usr/sbin/sshd). Does it mean I have to recompile them
> with PAM support? What will happen at the next upgrade (I'm a NetBSD
> sysadmin newbie).
>
> * PAM is only a part of the story, I still need NSS:

i wish PAM won't ever be integrated in NetBSD, or if it will, it will be
completely optional.