On Sat, 1 Dec 2018 20:46:58 +0000
g4sra <g4sra@???> wrote:

> One server and 28+ workstations all to be Linux, the rest of the
> network is inconsequential (firewalled off).
>

OK, I would install the latest Samba I could get, which, as you will be
running Devuan, will be from here:

http://apt.van-belle.nl/

I would then provision Samba as an AD DC and then join the Linux
machines to the AD domain.

This way you only have one place to maintain users & passwords etc

More info here:

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller

And here:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Rowland