That would depend on how you plan to authenticate if using internal LDAP then this will be easiest.