Single sign-on suggestions?

[Eamonn Sullivan]

Just to put a cap on this thread, I decided to just go with migrating
the unix accounts to LDAP for the time being. The guides on the wiki:

https://help.ubuntu.com/community/OpenLDAPServer

and

https://help.ubuntu.com/community/LDAPClientAuthentication

Are both good. Though on the server side, I used the migrationtools
package and did an ugly hack on the migrate_all_online.sh script --
basically, I modified to continue adding entries with ldapadd if
there's an error on one of them, instead of stopping on the first
error. However, it seems to work fine for me. I don't recommend this,
obviously.

I kept some notes for myself (including the ugly hack), here:

https://wiki.eamonnsullivan.co.uk/CurrentLDAPConfiguration

I hope that helps someone. I'll tackle Samba at some future date. The
kids never change their passwords, anyway, so it's only me that has to
run passwd and smbpasswd multiple times.

I still think this could be improved and I'm willing to help anyone
who wants to try.

-Eamonn