I just looked at the LDAP schema and noticed that there's no numeric userid/groupid field. We're going to need to carry over the userid and groupid from the database as those numerics are used in other databases that refer to records in the account system and on our servers as Unix uids.
-Toshio