Agreed, dealing with LDAP would be far, far easier if there were a single monolithic config file (or hell, even a folder full of config files) instead of the un

Agreed, dealing with LDAP would be far, far easier if there were a single monolithic config file (or hell, even a folder full of config files) instead of the unbelievably complex LDIF process. LDAP, or LDAP + Radius (for integration with a second factor) is still a dynamite technology and pretty much required once a network / team reaches a certain size. There's definitely demand for an "EasyLDAP" or the like that offers sane defaults and easy config for deployment in a cloud environment.