Just got out of a marathon sysadminning session where my team lead and I did quite a bit of architecting, planning, troubleshooting and strategerizing.
All I have to say is that Apple rocks for their dscl
and dsconfigldap
command line tools and “bind_policy = soft” is your friend for Linux hosts using LDAP.