How do I set up Xaraya to authenticate against MS Active Directory?

* Initialize and activate the Authldap module.

* Edit the User.AuthenticationModules xarcore:variable of
var/config.site.xml so that authldap is before authsystem:

<xarcore:variable name="User.AuthenticationModules"
type="scs_string">authldap;authsystem</xarcore:variable>

* Modify Authldap config as follows...

LDAP Server Name or IP: <YourDCName>
LDAP Server Port Number: 389
Anonymously Bind to Server: <uncheck>
LDAP bind DN: dc=<yourdomainname>, dc=<suffix>
LDAP UserID Field Name: samaccountname

Search User DN: <checked>
LDAP Admin ID: <[email protected]>
LDAP Admin Password: <password>

The next part of the config assumes you want any Active Directory user
to have a Xaraya account auto-created upon authentication...

Add LDAP User to Xaraya Database on Login: <checked>
LDAP Username Attribute Name: displayname
LDAP Email Attribute Name: mail
Default Group: Users (or whatever is appropriate for your deployment)

* That's it.  Test by attempting to long in with any enabled Active
Directory username and password.

Note: the LDAP Admin ID does not need to be an Active Directory
administrator.

Warning: the username and password entered in the authldap config for
authenticated binding to the Active Directory LDAP are stored in
clear-text in the database.

Warning: if SSL is not setup/required for the Xaraya site, username and
passwords are passed from web client to web server in clear-text.

Warning: the configuration described above uses the clear-text
facilities of LDAP and hence passes the user credentials between the web
server and the Domain Controller in clear-text.

Anyone had any success implementing PHP LDAP over SSL?