A secnod for Yubikeys. We love them. You can load your own key onto them so there is no worries when a third party (like RSA) gets hacked. There are open souce tools to configure them and run authentication servers. Integrated with PAM, and can be used with radius servers. And they are about $25 each, with no expiry date.
So using rough numbers based on my taxes (in Canada, so yours should be lower), if you are earning $125K, you are taking home something like $7000 a month. Deducting your rent, you are left with $5500. Obviously I don't know how many loans you have, or how many parking tickets, but that's a fair bit of cash SF might have a high cost of living, but you really don't have much left at the end of the month?
Unless I missed something, Samba 4 is not in Alpha release anymore. It has gone through beta, and is now in release candidate stage. (rc4 currently) It is designed as a full Active Directory implementation (including DNS and LDAP)
I run quite a number of Debian systems, mostly squeeze, but a couple of older releases. None of the machines had any direct problems, however one machine that runs some java processes had the java processes using up 100% of the cpu. Another iscsi server process was filling up the logs with "failed to read from timerfd, Resource temporarily unavailable". And my desktop Debian machine had Google chrome using all the cpu.
The above fix:
I assume it forces setting of the time (to the current time) which resets something. I can confirm it worked for me. Java processes were pegged at 100%, restarting the processes didn't help, but after doing the above, and restarting the java, they were normal again.