SSSD System Security Services Daemon provides an NSS and PAM interface to remote authenticators such as LDAP, Kerberos, FreeIPA.

The SSSD System Security Services Daemon provides an NSS, PAM, and D-Bus interface to remote identity and authentication services, including LDAP, Kerberos, AD. This simplifies login management on clients, and provides optimisation features such a caching. It is available in most Linux distributions.

See the description in lwn.net from 2011, or the RedHat documentation.