Could you share the setup you ended up using?

In my institution I have to replace a long lived solution that even suports a nis domain, and I feel a bit overwhelmed.