Centralized Authentication Proposal

While implementing the BCFG2 configuration management system on the build farm, the prospect of having a passwd, shadow and groups file controlled by the utility was brought up several times. While this is one method of managing a consistent set of users and groups across the build farm, I feel that there is other software available that would be better suited for this task.