The only file that I need to worry about with ldap and pam is system-auth. All the other modules call system-auth, so changes there will propagate out.