Why not LDAP?
Administration
Initial configuration complicated
SSL certificate management
Schemas
Kerberos
Ongoing management complicated
NIS+ itis
No vi; add/change/delete via command line utilities
Command line utilities take bewildering array of options