We've used LDAP for authentication by binding as the user and checking if they belong to certain groups. Those groups are then used to give the user certain abi

We've used LDAP for authentication by binding as the user and checking if they belong to certain groups. Those groups are then used to give the user certain abilities. https://github.com/debolk/bolklogin https://github.com/debolk/bolklogin User management was done through gosa / fusiondirectory.