Identity Management
From Hack Manhattan Wiki
The goals of this project are:
Have a single user database for login purposes via ssh and LDAP, either with passwords or keys. As opposed to having to create accounts on each machine or application.
Be able to add or remove accounts in that database and have them added or removed from all machines.
Have a PKI/CA system that could issue user certificates for OpenVPN.