Reliable, effective, and simple. If you don’t mind a blip in ldap service for a minute or two in the wee hours of the night, it works like a charm.