Another solution is to have two directories, like OpenLDAP for Linux machines, and Active Directory for Microsoft. That mitigates the problem somewhat, but now you’ve got two directories to maintain.