@TaTa The default NFS in FOG is still version 3 which has no concept of user authentication/authorization. Sure you can try to lock things down a bit by setting access rights on the FOG server filesystem.
Thanks all. You are right. LDAP uses plain text password. I had ‘&’ symbol in the password and that breaks it. I set up a test RHEL server and was able to make it work by removing ‘&’ symbol. My “controlled” server however is till not working. No error in /var/log/php-fpm/www-error.log. Apache detected when I tried to login. Re-installing -php-ldap but no go. Does anyone know how to debug it? Thanks!
In general, is it okay to use packages designed for Stretch on Jessie?
No idea. Try it on a test box. Worst thing that can happen is it doesn’t work, then you can come back here and let the world know. My personal advice though - don’t use Stretch packages on Jessie - just my 2 cents. They have two different names for a reason.