OpenLDAP for Central Auth?

Hi,

Has anyone successfully deployed OpenLDAP for central auth in a very mixed unix environment? With Host based access control? Plus any documentation would be really great.

My needs; - Central Auth - Host based access control (e.g. user "John" from group "accounts" can't log into "development servers". - Caching for Client logins on laptops. I figure SSSD will be useful here? - Encryption (This looks pretty straight forward in the OpenLDAP 2.4 doco)

Client OS's involved; - Solaris 9/10 - Fedora 15/16 - Centos 5/6

cya

Craig