If thats all you need in place, a ldap based setup would work - perhaps even CDS
Could you point me at examples of either of these?
It is not clear to me where LDAP comes in - for authentication I guess. But what about managing the password files? Or does one not have to do that?
Only on the LDAP master server. Once configured, all users have only one source for usernames and passwords; change it there, and it's visible everywhere.
mark