[vaughnagon]

While direct ldap or kerboros auth would be ideal, if the auth is cookie based and on the same base domain, can't another app verify your user's auth based on the presence and verification of your cookie? I'm thinking that if instead of sending your potential vbulletin user straight to the vbulletin home page, you send them to an intermediate page that mimics login.php's functionality. First, does the ldap or kerberos auth loop, then makes the same form submittal that login.php makes. The cookie gets written and your user is auth'd. Then, redirect to home page. You would have to alter and automate the account registration steps so that they would be in sync. An un-auth'd user would get a simple message that they need to contact the admin.

Is this possible?