If you internal LAN is relatively secure you probably want to use NIS to
give out the maps for master.passwd and group.
To be extra safe, I would setup the maps so that all the passwords in
the NIS master.passwd are '*' and use pam_smb or some such critter
against your Samba PDC if you need UNIX
Could someone point me in the right direction to find
information on creating an authentication server in such
a way that if some user logs in on a particular machine,
as long as he is in a certain group he will have read
access to all/or certain files as well on other servers
depending on the
