So I thought I'd have a play with it to get a feel for how it would work for us.
That play took a while (two days) but I'm beginning to get a feel for it. While I normally like the command line for alot of sys-admin stuff, I really wanted a graphical browser to surf around entries and make changes.
It took half a day to track down and configure jxplorer, but this did what I wanted and my search ended there. Other candidates which I tried out included:
- directory_administrator old school X11 interface, does not currently work with OpenLDAP 2.2 or newer - which was a problem for me.
- lat which was a prone to crashing at my hand: I think due to my incompetence.
- luma which I couldn't get configured - probably for the same reason I had problems with lat.
The upside: One directory of users with roles, all the services use this directory. Centralised and manageable.