The users and machines of the new CAL network should all be listed in a replicated directory service provided by OpenLDAP servers. This directory service will provide an analog to NIS as well as publishing any public keys that need to be published.

These servers will most likely run on the same machines as the CAL Kerberos Domain servers.