I've found that FreeIPA tends to be a fantastic replacement: https://www.freeipa.org/ https://www.freeipa.org/ If you're using Red Hat/Fedora GNOME desktops, y

I've found that FreeIPA tends to be a fantastic replacement: https://www.freeipa.org/ https://www.freeipa.org/ If you're using Red Hat/Fedora GNOME desktops, you can pair that with Fleet Commander to set up desktop policy: https://fleet-commander.org/ https://fleet-commander.org/ At some point soon, I expect it to work for SUSE and Mageia systems, too. I currently run this on a Fedora Server setup to pair with some Fedora Workstations I manage.