Despite the best intentions I've seen quite a few organizations crippled by having a directory service die. I'd much rather have a push based service (like con

Despite the best intentions I've seen quite a few organizations crippled by having a directory service die. I'd much rather have a push based service (like configuration management) where downtime means people can't change their passwords. Having every login fail because a directory service is down seems silly. Not like the mapping of users <-> systems is particularly large, even for the largest organizations.