Comment by roliver

Regarding AD/LDAP/Kerberos, I gather it's possible to run an AD DC as part of Samba now. I haven't tried it out yet, but it looks promising.