Distributed authentication survey

[eric <eric-list-openbsd-misc@catastrophe.net>]

We're looking to start migrating a good number of OpenBSD hosts to 
a more centralized authentication model such as kerberos, etc. The
experience of the folks on this list has often helped many of us come up
with a more elegant and/or effective solution. So here's a bit of a survey
if you're interested :)

For you folks who are in distributed environments with more than a handful
of machines, I'd like to know how you're handling authentication. Have you
gone the kerberos route, or are you sticking with yp/nis/etc? Have you
written your own modules for the bsdauth subsystem and just call it from
login.conf? What are the pros and cons of each route that you looked at,
etc.

I'll summarize to the list and anonymous any results. Please reply-to

<eric-list-openbsd-misc-survey-2005@catastrophe.net>

Thanks.

- Eric