If thats all you need in place, a ldap based setup would work - perhaps even CDS
Could you point me at examples of either of these?
It is not clear to me where LDAP comes in - for authentication I guess. But what about managing the password files? Or does one not have to do that?