Unique Authentication needs?

[Ian Wilson]

I've inherited about 70 or so boxes from a non-profit that I do a fair
amount of volunteer work at;  95% are linux, but there's a few running
vms and a few running HPUX.

Currently, it's a "Free-For-All" with everyone having and knowing the
root password, and general chaos.  Specific "owners" (for example, the
dining hall) own and manage their systems, requiring root, and other
groups (Men's health) have strict privacy requirements for maintaining
records and other goodies.

I'm looking to implement a tiered authentication system, with groups,
and other goodies, and because of the limitations of VMS and HPUX, I
think that LDAP is out of the equation.

Is it possible to do what I'm looking for with RADIUS, or should I
spend some time looking at getting the HPUX and VMS boxes to talk
LDAP?  Is there a UI (can be web or console based) that can make
adding/deleting/changing user accounts simple?  (Bonus points if it
can link to AD.)  Or, should I just go back to bed at 3:30AM?

I'm open to ideas, recommendations, and general complaints.

Ian
-- 
Ian Wilson
ian.m.wilson at gmail.com
http://ianwilson.org || http://www.ians-blog.com

Solving site load issues with database replication is a lot like
solving your own personal problems with heroin -- at first, it sorta
works, but after a while things just get out of hand.