OpenLDAP is just a lego piece of an actual equivalent, you would need a schema and a ton of configuration to use it as a user and authz directory. A better equi

OpenLDAP is just a lego piece of an actual equivalent, you would need a schema and a ton of configuration to use it as a user and authz directory. A better equivalent to AD would be FreeIPA, which is 389ds (LDAP server, similar to OpenLDAP) plus Kerberos plus OS integration and admin tools. However, the config and install part that AD has would still be separate in something like puppet.