OK, I've just migrated my home box to use ldap for posix accounts/groups, samba. Already had email contacts in an ldap directory. It was one of those things that I kept putting off. Glad I did it. Prolly write up a ~HOW[NOT]TO shortly, once I've figured out what I shouldn't have done.