my biggest issue with ldap accounts is that when your network is down you can't log into servers to fix things, though I must admit I ran that before sssd was even a thing