User Authentication and access control

[timcenty]

Hello,

I'm seeking a better solution or option for user authentication and access control. Currently we have Microsoft AD and Samba winbind on the CentOS7 clients. We only use this setup for the user authentication. The host access and sudoers is locally managed. We do have Ansible based configuration management in place. However this is a cumbersome setup and pain to manage at times. For some reason, winbind won't sync up with AD unless you remove the winbind cache tdb file and restart it. Not sure what's the problem with that. Any one have any idea bout it?

So this brings a question, is there any better solution to better manage this?

Thanks much