There's a reason why people use LDAP and Kerberos. I don't know of anybody who thinks that keeping a user and group database in sync is practical beyond 3 or 4 machines.
Posted Jun 1, 2012 17:45 UTC (Fri) by nix (subscriber, #2304)
[Link]
True enough, though I've kept them in sync before by splitting /etc/passwd et al up into machine-local and shared ranges, then rsyncing the shared set across and catting the two together under (at the time) cfengine control. (Though LDAP works, it could be considered a cure worse than the disease. NIS, well, shudder. Hesiod, perhaps?)