Samba coupled with configurations of openLDAP, Kerberos and PAM (Plugable Authenticatin Modules)  worked well for me sometime back.