I see your point. In the case of the original question, you could use Puppet for user management (I do and answered how I do). LDAP was suggested because it is more flexible but it didn't directly answer the question. Obviously, I am a minority here lol. And you gentlemen are high rep users so I respect your views on this. Don't really mean to argue just want to understand :-).