You can put any centralized account into a local group, but you need
to
do it on all clients. I have an LDAP account "jhrozek" that is a member
of local group mock:
$ grep mock /etc/group
mock:x:135:jhrozek
OK, I know but I'd like to avoid to insert AD developers' account in the local
group one by one :(
Thanks again
--