Ok so here's the deal. I need to lock down my servers and only allow users to log in via their ldap account. There's an application account that everyone uses, but I would rather have them use their LDAP account and then sudo over to the app user. I got that part, however, there are components with our app that requires the app user to have keyless ssh. Wouldn't make sense to allow some users direct logon w/ the app user while others require LDAP.
In my sshd_config file I would set