Samba coupled with configurations of openLDAP, Kerberos and PAM (Plugable Authenticatin Modules) worked well for me sometime back.