Sunshine's response is the way to go with this. Establish your groups in an LDAP directory and then have your scripts sync your users and groups. This is what we are using to manage over a thousand users at my site and its has been running for years without a hiccup.
... View more
