Gentoo, ecryptfs, ldap authentication

auth            required        pam_env.so
auth            sufficient      pam_ldap.so try_first_pass
auth            required        pam_unix.so use_first_pass likeauth nullok
auth            required        pam_permit.so
auth            required        pam_ecryptfs.so unwrap

account         sufficient      pam_ldap.so
account         required        pam_unix.so
account         required        pam_permit.so

password        required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password        sufficient      pam_ldap.so use_authtok use_first_pass
password        required        pam_unix.so try_first_pass use_authtok nullok sha512 shadow
password        required        pam_permit.so
password        optional        pam_ecryptfs.so

session         required        pam_limits.so
session         required        pam_env.so
session         required        pam_unix.so
session         optional        pam_ldap.so
session         required        pam_permit.so
session         required        pam_mkhomedir.so skel=/etc/skel umask=0022 silent
session         optional        pam_ecryptfs.so unwrap

turtle@turtle ~ $ ecryptfs-mount-private 
Enter your login passphrase:
Inserted auth tok with sig [38f34f9a30e4df83] into the user session keyring