FreeIPA

It seems I should really being learning how to set it up and to manage it:

 

Identity

Manage Linux users and client hosts in your realm from one central location with CLI, Web UI or RPC access. Enable Single Sign On authentication for all your systems, services and applications.

 

 

Policy

Define Kerberos authentication and authorization policies for your identities. Control services like DNS, SUDO, SELinux or autofs.

 

 

Trusts

Create mutual trust with other Identity Management systems like Microsoft Active Directory.