Here's the end goal.

I setup a new fedora computer. It's local passwords are scrambled by default. I want to be able to give the system to a user and have it authenticate with some central database. (eg gmail/google account or facebook) Then the user can set/sync their local password. This way I don't have to hard code any passwords in the kickstart setup scripts for the initial log in.

The other features nneded It will use the central database (eg gmail/google account or facebook) to authenticate, that way the user using any of my computers without needing to know the local password. But if the internet is unavailable I want it to use the local password as a backup. Good for Laptops which won't have a wireless internet connection until after the user logs in.

Years ago I had this sort of thing setup partly with freeipa. Problem was hosting it and the fallback wouldn't always work. I'm looking to use an already established authentication method, like Google's OpenID that way the user actually knows and manages their password.

Does anyone know a way of doing this or can at least steer me in the right direction?