How about a patch to libnss-ldap to respect an environment variable to force soft binding? Something like 'if (getenv("NSS_LDAP_BINDPOLICY_SOFT" != 0 && getuid() < 100)) { /* force soft bind regardless of ldap.conf */ }'
How about a patch to libnss-ldap to respect an environment variable to force soft binding? Something like 'if (getenv( "NSS_LDAP_ BINDPOLICY_ SOFT" != 0 && getuid() < 100)) { /* force soft bind regardless of ldap.conf */ }'