I've actually been researching this recently. The problem is that by default AD stores the users password in simple unicode representation of the cleartext password. But vB MD5 hashes the password in the browser before sending it to login.php.
I think if you install Services for UNIX (SFU) on your AD, it can be configured to keep an MD5 hashed password in a new msSFU30password field. However, to retireve and compare this attribute you would have to use LDAPS rather than LDAP, i.e. configure a cert on your AD.
Anyway, I'll update this thread as and when I make any progress on this.
An alternative would be to build a mod which uses SAMBA's ntlm_auth or winbind mechanisms. Again, more news if I make any progress on that.
-- hugh
|