I built my own package for libnss-ldap which seems to fix this bug for me. I built 250, but the changelog for 249 says:
* fix for BUG#255: deadlock in initgroups -- Andrew Phillips Atlantic Division, IT Operations & Client Support Directorate CIO Branch Environment Canada (902) 426-6262 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]