Maybe that was because you were trying to apply AD ideology to GNU/Linux, i.e. do things in "Active Directory-way"? I don't know about AD, but implementing a s

Maybe that was because you were trying to apply AD ideology to GNU/Linux, i.e. do things in "Active Directory-way"? I don't know about AD, but implementing a single sign-on authentication on GNU/Linux is simple. Just configure PAM and roll the configuration to all machines (with rsync or whatever you prefer). I've never tried authenticating against a LDAP database, though. However, I believe if I'll see a Windows machine and be asked to set up a simple SSO configuration, it would take ages to understand (not just step-by-step copy some tutorial from the net).