Let's scope out an average setup:
- Web company
- About 50 users
- A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales)
- A bunch of permissions (Only management is allowed to access sensitive business data, only administrators are allowed on production systems, etc. pp.)
- Windows Workstations
- Linux servers
- Communication (Email, In-house IM, etc.)
- A few Web Apps with native AAA (e.g. Mantis, Mediawiki, etc.)
- A few URLs which need to be protected with Basic Auth
- Maybe a few commercial applications from ISVs with LDAP connectors
Going with OpenLDAP in such an environment may be feasible but it sure isn't fun, especially when you're new to LDAP.
A standard answer would be Active Directory (given their Kerberos and LDAP backends they are even somewhat standards conform), but are there any different products which fit nicely in such an environment and might even have an advantage over AD or OpenLDAP?