I'm beginning to tire of maintaining individual system files on my increasing number of Solaris servers (was 2, now 10 and growing strong). I'm looking at the Sun Java Directory Server as a non NIS/NIS+ solution.
We run a predominantly Windows shop here, and so I'm also toying with one of two things:
- Using Kerberos auth directly from the Solaris clients to AD (with appropriate utilities on the domain controllers), or
- Using the Directory Server and using their identity sync product to sync to the Windows domain
At this point I'm leaning more toward #2 because I only need to muck with AD if I (or the user community) want to share credentials between servers.
Any insight or horror stories are appreciated.