Can you use LDAP and PAM to implement a restricted shell and control those users via groups on the LDAP DC?
I would like to do this for several Red Hat, Solaris and Ubuntu servers?
The very short answer is yes. However, your question is rather broad and answering it in full is outside the scope of this site.
The general outline is to use