I'm setting up a new, small network. About 10 servers at 3 sites with just 3 users total. All are running RHEL 6.1. I was hoping to have centralized user management, especially having a single password to make our lives easier. Easy is the goal here. The three of us are developers without sysadmin skills.
The commercial Red Hat Directory Server was pointed out to me. It looks like it does what I want but it's expensive and is targeted at companies with thousands of servers and users.
I also found IPA, which Red Hat seems to have recently (as of 6.1) integrated as part of their "Enterprise Identity Management Guide" and is available via yum from their repos as ipa-server. I assume this is FreeIPA with the "Free" removed. This product might also do what I want. I get the impression it is newer and without strong commercial support I worry it will just make my life harder in the end.
It seems the old fashioned way to solve this was duct taping some sort of LDAP + PAM + whatever system. That sounds really messy for our small, inexperienced team.
So, the question: can anyone with experience compare and contrast RH Directory Server vs IPA? Is there a clear winner for my situation?