On Wed, Dec 09, 2015 at 01:21:19PM -0700, Devin Reade wrote: > --On Wednesday, December 09, 2015 05:25:14 PM -0200 Friedrich Locke > <friedrich.lo...@gmail.com> wrote: > > > If you had about 10k users and 5k machine how would you manage > > authenticating issues? Keep in mind that this is a very heterogenous > > environment with ldap, ftp, smtp, pop3, traditional unix boxes etc .... > > You've already got the key to that solution (LDAP). Do you mean > things like provisioning and credential management? I've not used it, > but you might want to look at FreeIPA. Although it uses KDC at the > core, IIRC you can have LDAP-only clients authenticate to it.
IIUC FreeIPA does require sssd and pam, thus out of luck on OpenBSD. j.