&gt; a PAM based authentication module, which IIRC can plug into LDAP potentially.<p>Yes, pam-ldap &#x2F; pam-sssd &#x2F; pam-winbind plug into various LDAP implementations (plain LDAP &#x2F; ActiveDirectory) and work transparently with all PAM clients.