Milner's questions

I have some Solaris machines that are connected to EMC Symmetrix for SAN storage. Apparently the Symm has a gatekeeper device that is used with the symmetrix CLI. We don't need the CLI, but I have these gatekeeper devices that constantly fill /var/adm/messages and the like with corrupt label errors.

Is there anything I can do (short of deleting the devices on machine start) to get rid of them? Or should I just try to get our SAN guy to get the installer for the CLI? These things are getting annoying, and the devfsadmd daemon keeps rediscovering them on boot.

I'm beginning to tire of maintaining individual system files on my increasing number of Solaris servers (was 2, now 10 and growing strong). I'm looking at the Sun Java Directory Server as a non NIS/NIS+ solution.

We run a predominantly Windows shop here, and so I'm also toying with one of two things:

1. Using Kerberos auth directly from the Solaris clients to AD (with appropriate utilities on the domain controllers), or
2. Using the Directory Server and using their identity sync product to sync to the Windows domain

At this point I'm leaning more toward #2 because I only need to muck with AD if I (or the user community) want to share credentials between servers.

Any insight or horror stories are appreciated.