What would the best solution be for central authentication?
I want to store all of our users centrally and use that for SSH access and other services. I also want our users to be able to authenticate on their machines (mostly macs) using the same authentication server.
Currently we use SSH with public keys, but each user generates their own keys and they add them themselves on our servers. This becomes hard to manage when we get new employees or others leave.
I need passwordless authentication though, as I don't trust users in creating their own passwords.
What other options are there apart from LDAP? All of our servers are running some flavour of Linux.