For years the Laboratorio di Informatica (LABinf) at the Politecnico di Torino ran on a Samba NT4 domain sitting on top of an OpenLDAP directory. That single setup handled authentication, file sharing, printing and FTP access for around ninety workstations, and for the most part it worked. The problems were underneath. User provisioning was split across separate, non-atomic steps with no real recovery if one failed; the management tools were built on smbldap-tools, which has been effectively unmaintained for a long time; old security workarounds from past Samba upgrades were still sitting in the production configuration; and nothing was isolated, since every service shared the same kernel and process tree on an operating system that was already well past its expiry date.