Plone/Zope authentication

Has anyone had success using WebAuth or another kerberos-based authentication scheme to secure Plone users in Linux?

Kerberos?! No, but LDAP works very well if you're looking for an SSO scheme. We're running LDAP + Samba + PAM + Plone + WindowsDomain + LTSP on a couple of sites without any problems ...

I had some luck authenticating a user base from Active Directory, but couldn't figure out the GRUF groups integration in time, so switched back to Plone members for the launch. This is probably better since they shouldn't use the same password and I didn't want to rewrite the AD schema to add another field.

I had the luxury of a clean slate and only a few dozen users though.