sssd and nss security for openldap

Hi guys,

COuld you please help us to understand the exact difference between sssd and nss in linux?

What is the best suited for openldap. I have a set up running with openldap + nss-pam.

Please suggest which one will be the best to use (nss or sssd) for openldap.

THanks

Ajith