As an aside, if you're interested in doing Kerberos and LDAP together with
a 389-ds backend you may want to look at the FreeIPA project which handles
a lot of the integration for you. It also supports storing SSH keys.
rob
Freeipa looks very very nice indeed, but it doesn't look like it's built
and available for ubuntu :(