Are there any best practices on managing directories?

For Instance, I want to authenticate trusted UNIX users and untrusted Django users in the same directory?

What if I made completely different directory to manage contact information, but I want to replicate shards of it and give priority based on geographic location?