If it helps… My LDAP and NFS servers are separate too. I control both, so it’s a bit different, but I still have it setup so that account creation and home dir

If it helps… My LDAP and NFS servers are separate too. I control both, so it’s a bit different, but I still have it setup so that account creation and home directory creation/export are handled in one script. The account creation script (on the LDAP server) makes an SSH call to the NFS server to run the home directory creation/export update script. That specific SSH certificate is password-less and restricted to running only that single command. It could be root or another user that calls sudo. So, some of what you’re looking for can be done with some SSH tricks… but only if both sides are comfortable with that setup. The benefit is that each side can manage their own scripts. The NIS admin can write the script on their side and NFS on their side. You just need to establish the workflow that works best for you. Our cluster is completely self contained, so with sudo and SSH restrictions, I’m not concerned about security issues with this setup.