> I'd like to avoid doing kerberos or NIS for half a dozen little boxes, > but if that's the only choice that's what I'll have to do. RADIUS is probably much simpler, man pam_radius.