We got hosed by PADL and rfc2307/rfc2307bis. In short: We never standardized a viable schema that covered the majority of real-world enterprise use-cases. Act

We got hosed by PADL and rfc2307/rfc2307bis. In short: We never standardized a viable schema that covered the majority of real-world enterprise use-cases. Active Directory did. We got stuck with the broken rfc2307 (essentially NIS-in-LDAP), and the slightly better but abandoned rfc2307bis. Without a standardized schema, every management tool out there had to either expose LDAP directly, or provide a limited subset of operations supportable across random schema. We could solve this issue with a new RFC defining a modern standard server schema, including things like sshPublicKey, but I don't know if there's any UNIX/Linux vendor still alive that would invest in doing so.