Central Auth Anyone?

Hi, Has anyone successfully deployed OpenLDAP/IPA or even 389 DS for central auth in a very mixed unix environment? With Host based access control? Redhats new IPA 2.0 product on paper looks brilliant, I just keep finding bugs and it's feeling just too new to deploy commerically at the moment (happy to be proven wrong). My needs; - Central Auth - Host based access control (e.g. user "John" from group "accounts" can't log into "development servers". - Caching for Client logins on laptops. I figure SSSD will be useful here? - Encryption (This looks pretty straight forward in the OpenLDAP 2.4 doco) Client OS's involved; - Solaris 9/10 - Fedora 15/16 - Centos 5/6 cya Craig