Yeah, I think people who have never used AD don't really understand - there is no equivalent for a busy sysadmin. There's no open source alternative that has the same functionality - I've looked. You might be able to cobble together a similar level of capability with 5 or 6 different applications, but good luck getting them to all play nice with each other and remain stable enough for an organization with hundreds of users.