mod_authz_ldap definitely can use groups or users to authenticate though to be honest, I am only authenticating to OpenLDAP and I do see some references to authenticating to active directory in the documentation.
Yeah, I have LDAP working w/ groups using Dokuwiki's built in LDAP auth backend. It was rather trivial to setup...
also - my impression was that only IE could use the SSO and Firefox would probably have to login.
Well, all my firefox clients do it with Squid, it can be done.
Thanks! jlc