What's wrong with openldap? I mean, apart from being a pita, i thought it was the widely used central auth directory (behind all sorts of sso frontends).
Personally i'm using lldap, which is a neat no-footgun ldap daemon for small/personal deployments.