> sudo has functionality to talk to LDAP
That is scary! I may need to look more at openbsd
There's a Linux port of doas named OpenDoas
The purpose is to allow users access by ldap criteria like group so the sodoers file need not be edited on each and every server.
https://www.sudo.ws/docs/man/sudoers.ldap.man/
There's a Linux port of doas named OpenDoas